| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24565 | 6.8 | The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them. Furthermore, the settings are not escaped when ou | 2022-07-28 12:00:00 | 2021-08-23 12:15:00 |
| CVE-2021-24537 | 6.0 | The Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened environment (ie with DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS and DISALLOW_UNFILTERED_HTML set to true) via the 'widget_rrm_similar | 2022-07-28 11:41:00 | 2021-11-08 18:15:00 |
| CVE-2021-34570 | 7.8 | Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests. | 2022-07-28 10:40:00 | 2021-09-27 09:15:00 |
| CVE-2021-34599 | 5.8 | Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS | 2022-07-28 09:34:00 | 2021-12-01 09:15:00 |
| CVE-2021-34598 | 4.3 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active | 2022-07-28 09:34:00 | 2021-11-10 12:15:00 |
| CVE-2021-34582 | 3.5 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file. | 2022-07-28 09:32:00 | 2021-11-10 12:15:00 |
| CVE-2021-39609 | 3.5 | Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function. | 2022-07-28 00:30:00 | 2021-08-23 21:15:00 |
| CVE-2020-8648 | 3.6 | There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c. | 2022-07-28 00:08:00 | 2020-02-06 01:15:00 |
| CVE-2022-34762 | 7.5 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advan | 2022-07-28 00:00:00 | 2022-07-13 21:15:00 |
| CVE-2022-34761 | 7.5 | A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA Modicon Co | 2022-07-27 23:56:00 | 2022-07-13 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: