| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-27457 | 5.0 | A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials us | 2022-07-30 12:34:00 | 2021-05-20 12:15:00 |
| CVE-2021-24195 | 6.5 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer (User Switching) WordPress plugin before 1.8, to install any plugin (including a specific version) from the WordPress repository, | 2022-07-30 12:33:00 | 2021-05-14 12:15:00 |
| CVE-2021-24194 | 6.5 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit Failed Login Attempts WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress reposito | 2022-07-30 12:31:00 | 2021-05-14 12:15:00 |
| CVE-2021-24788 | 4.0 | The Batch Cat WordPress plugin through 0.3 defines 3 custom AJAX actions, which both require authentication but are available for all roles. As a result, any authenticated user (including simple subscribers) can add/set/delete arbitrary categories to | 2022-07-30 12:30:00 | 2021-11-08 18:15:00 |
| CVE-2021-24193 | 6.5 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin (including a specific version) from the WordPress repository, as we | 2022-07-30 12:30:00 | 2021-05-14 12:15:00 |
| CVE-2021-28496 | 4.0 | On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON | 2022-07-30 12:29:00 | 2021-10-21 17:15:00 |
| CVE-2021-24801 | 4.3 | The WP Survey Plus WordPress plugin through 1.0 does not have any authorisation and CSRF checks in place in its AJAX actions, allowing any user to call them and add/edit/delete Surveys. Furthermore, due to the lack of sanitization in the Surveys' Tit | 2022-07-30 12:11:00 | 2021-11-08 18:15:00 |
| CVE-2020-29134 | 7.8 | The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4 | 2022-07-30 03:49:00 | 2021-03-05 16:15:00 |
| CVE-2020-13558 | 6.8 | A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free. | 2022-07-30 03:49:00 | 2021-03-03 18:15:00 |
| CVE-2021-40397 | 9.3 | A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to | 2022-07-30 03:47:00 | 2022-01-28 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: