| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-33895 | 6.8 | ETINET BACKBOX E4.09 and H4.09 mismanages password access control. When a user uses the User ID of the process running BBSV to login to the Backbox UI application, the system procedure (USER_AUTHENTICATE_) used for verifying the Password returns 0 (n | 2022-12-20 23:15:00 | 2021-06-25 14:15:00 |
| CVE-2019-19966 | 2.1 | In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655. | 2022-12-20 22:15:00 | 2019-12-25 04:15:00 |
| CVE-2021-24639 | 5.5 | The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server. | 2022-12-20 22:10:00 | 2021-09-20 10:15:00 |
| CVE-2021-24618 | 3.5 | The Donate With QRCode WordPress plugin before 1.4.5 does not sanitise or escape its QRCode Image setting, which result into a Stored Cross-Site Scripting (XSS). Furthermore, the plugin also does not have any CSRF and capability checks in place when | 2022-12-20 22:07:00 | 2021-09-20 10:15:00 |
| CVE-2021-24584 | 3.5 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability (contributor+) to update arbitrary timeslot from any events. Furthermore, no | 2022-12-20 22:06:00 | 2021-09-20 10:15:00 |
| CVE-2021-24728 | 6.5 | The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and orderby parameters before using them in SQL statement, leading to Authenticated SQL Injections in the Me | 2022-12-20 22:03:00 | 2021-09-13 18:15:00 |
| CVE-2021-24586 | 4.3 | The Per page add to head WordPress plugin before 1.4.4 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them. Furthermore, as the plugin allows arbitrary HTML to be inserted in one of th | 2022-12-20 22:01:00 | 2021-09-13 18:15:00 |
| CVE-2021-39173 | 6.5 | Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges (User or Admin), can trick Cachet and install the instance again, leading to arbitrary code execution on the server. This issue wa | 2022-12-20 21:52:00 | 2021-08-27 23:15:00 |
| CVE-2016-0996 | 9.3 | Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, | 2022-12-20 21:37:00 | 2016-03-12 15:59:00 |
| CVE-2022-41962 | 2.7 | BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6, and 2.5-alpha-1 contain Incorrect Authorization for setting emoji status. A user with moderator rights can use the clear status feature to set any emoji status for o | 2022-12-20 19:10:00 | 2022-12-16 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40236
Zapisa po stranici: