| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-3890 | 5.0 | The issue was addressed with improved deletion. This issue is fixed in iOS 13.4 and iPadOS 13.4. Deleted messages groups may still be suggested as an autocompletion. | 2022-07-12 17:42:00 | 2020-04-01 18:15:00 |
| CVE-2020-10966 | 4.3 | In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header manipulation leads to account takeover because the victim receives a reset URL containing an attacker-controlled server name. | 2022-07-12 17:42:00 | 2020-03-25 23:15:00 |
| CVE-2020-10087 | 5.0 | GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the user. | 2022-07-12 17:42:00 | 2020-03-13 17:15:00 |
| CVE-2020-9381 | 5.0 | controllers/admin.js in Total.js CMS 13 allows remote attackers to execute arbitrary code via a POST to the /admin/api/widgets/ URI. This can be exploited in conjunction with CVE-2019-15954. | 2022-07-12 17:42:00 | 2020-02-24 22:15:00 |
| CVE-2021-37524 | 4.3 | Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php. | 2022-07-12 17:39:00 | 2022-07-01 18:15:00 |
| CVE-2014-0068 | 2.1 | It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission. | 2022-07-12 16:37:00 | 2022-06-30 21:15:00 |
| CVE-2022-2301 | 4.3 | Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. | 2022-07-12 16:13:00 | 2022-07-04 11:15:00 |
| CVE-2021-25066 | 3.5 | The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitize and escape some imported data, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 2022-07-12 15:54:00 | 2022-07-04 13:15:00 |
| CVE-2014-0156 | 7.5 | Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary com | 2022-07-12 15:31:00 | 2022-06-30 21:15:00 |
| CVE-2018-14791 | 4.6 | Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected products. | 2022-07-12 15:20:00 | 2018-08-23 19:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39839
Zapisa po stranici: