| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-21971 | 4.3 | An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can perform a man-in-the-middle attack to | 2022-07-29 16:29:00 | 2022-02-04 23:15:00 |
| CVE-2022-21375 | 4.9 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris exe | 2022-07-29 16:26:00 | 2022-01-19 12:15:00 |
| CVE-2022-34961 | 5.4 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Users Timeline module. | 2022-07-29 16:19:00 | 2022-07-25 15:15:00 |
| CVE-2021-24312 | 6.5 | The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. | 2022-07-29 16:13:00 | 2021-06-01 14:15:00 |
| CVE-2022-2115 | 6.1 | The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting | 2022-07-29 16:10:00 | 2022-07-25 13:15:00 |
| CVE-2022-2219 | 7.2 | The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting | 2022-07-29 16:09:00 | 2022-07-25 13:15:00 |
| CVE-2017-20143 | 9.8 | A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection (Error). The attac | 2022-07-29 16:00:00 | 2022-07-22 17:15:00 |
| CVE-2022-2189 | 6.1 | The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers | 2022-07-29 15:57:00 | 2022-07-25 13:15:00 |
| CVE-2017-20142 | 9.8 | A vulnerability classified as critical was found in Itech Movie Portal Script 7.36. This vulnerability affects unknown code of the file /artist-display.php. The manipulation of the argument act leads to sql injection (Union). The attack can be initia | 2022-07-29 15:49:00 | 2022-07-22 17:15:00 |
| CVE-2016-15004 | 9.8 | A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to | 2022-07-29 15:42:00 | 2022-07-23 07:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: