| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-2932 | 6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2. | 2022-08-23 18:12:00 | 2022-08-22 14:15:00 |
| CVE-2021-36847 | 4.8 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at WordPress. | 2022-08-23 18:11:00 | 2022-08-22 15:15:00 |
| CVE-2022-0446 | 4.8 | The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 2022-08-23 18:09:00 | 2022-08-22 15:15:00 |
| CVE-2022-2930 | 7.8 | Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. | 2022-08-23 17:56:00 | 2022-08-22 12:15:00 |
| CVE-2022-1340 | 5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 2022-08-23 17:50:00 | 2022-08-22 12:15:00 |
| CVE-2022-2927 | 9.8 | Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7. | 2022-08-23 17:47:00 | 2022-08-22 09:15:00 |
| CVE-2022-34621 | 6.5 | Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter. | 2022-08-23 17:46:00 | 2022-08-19 14:15:00 |
| CVE-2022-34615 | 9.8 | Mealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. | 2022-08-23 17:43:00 | 2022-08-19 14:15:00 |
| CVE-2022-2600 | 5.4 | The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object. | 2022-08-23 17:24:00 | 2022-08-22 15:15:00 |
| CVE-2022-34857 | 6.1 | Reflected Cross-Site Scripting (XSS) vulnerability in smartypants SP Project & Document Manager plugin <= 4.59 at WordPress | 2022-08-23 17:17:00 | 2022-08-22 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: