| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-42367 | 3.5 | The Variation Swatches for WooCommerce WordPress plugin is vulnerable to Stored Cross-Site Scripting via several parameters found in the ~/includes/class-menu-page.php file which allows attackers to inject arbitrary web scripts, in versions up to and | 2022-08-09 13:19:00 | 2021-12-14 16:15:00 |
| CVE-2021-41242 | 7.9 | OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to cr | 2022-08-09 13:18:00 | 2021-12-10 23:15:00 |
| CVE-2021-4089 | 4.0 | snipe-it is vulnerable to Improper Access Control | 2022-08-09 13:18:00 | 2021-12-10 20:15:00 |
| CVE-2021-43808 | 4.3 | Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to anoth | 2022-08-09 13:17:00 | 2021-12-08 00:15:00 |
| CVE-2021-43175 | 5.0 | The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action that routes to other PHP files that implement the various API functions. Vulnerable versions of GOautodial valid | 2022-08-09 13:16:00 | 2021-12-07 18:15:00 |
| CVE-2022-27619 | 5.9 | Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Client before 2.2.2-609 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors. | 2022-08-09 13:14:00 | 2022-08-03 03:15:00 |
| CVE-2022-27865 | 7.8 | A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code. | 2022-08-09 12:14:00 | 2022-07-29 20:15:00 |
| CVE-2021-43858 | 6.5 | MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in ver | 2022-08-09 01:24:00 | 2021-12-27 22:15:00 |
| CVE-2021-44160 | 7.5 | Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire another general user’s privilege by modifying the cookie parameter without authentication. The attacker can then perform limited operat | 2022-08-09 01:23:00 | 2021-12-29 08:15:00 |
| CVE-2021-43862 | 2.1 | jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting (XSS) vulnerability. The code for XSS payload is always visible, but an a | 2022-08-09 01:14:00 | 2021-12-30 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: