| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-40311 | 4.8 | Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress. | 2022-10-21 20:59:00 | 2022-10-21 16:15:00 |
| CVE-2022-39309 | 6.5 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions prior to 21.1.0 leak the symmetric key used to encrypt/decrypt any secure variables/secre | 2022-10-21 20:24:00 | 2022-10-14 20:15:00 |
| CVE-2022-3382 | 7.5 | HIWIN Robot System Software version 3.3.21.9869 does not properly address the terminated command source. As a result, an attacker could craft code to disconnect HRSS and the controller and cause a denial-of-service condition. | 2022-10-21 20:23:00 | 2022-10-17 20:15:00 |
| CVE-2021-20222 | 5.1 | A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2022-10-21 20:11:00 | 2021-03-23 17:15:00 |
| CVE-2021-21045 | 9.3 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to | 2022-10-21 20:11:00 | 2021-02-11 20:15:00 |
| CVE-2021-20185 | 5.0 | It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages. | 2022-10-21 20:10:00 | 2021-01-28 20:15:00 |
| CVE-2021-20187 | 6.5 | It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication. | 2022-10-21 20:09:00 | 2021-01-28 19:15:00 |
| CVE-2021-20050 | 5.0 | An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data. | 2022-10-21 20:03:00 | 2021-12-23 02:15:00 |
| CVE-2021-20264 | 4.6 | An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from t | 2022-10-21 20:03:00 | 2021-10-06 16:15:00 |
| CVE-2021-21083 | 5.0 | AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by an Improper Access Control vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an app | 2022-10-21 20:02:00 | 2021-06-28 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: