| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1583 | 4.3 | The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur. | 2022-06-09 17:49:00 | 2022-05-30 09:15:00 |
| CVE-2021-34084 | 10.0 | OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary commands via the metadata() function. | 2022-06-09 17:30:00 | 2022-06-02 14:15:00 |
| CVE-2021-26633 | 7.5 | SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file. | 2022-06-09 17:18:00 | 2022-06-02 14:15:00 |
| CVE-2021-36866 | 3.5 | Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin <= 3.1.2 at WordPress. | 2022-06-09 17:08:00 | 2022-06-02 14:15:00 |
| CVE-2021-40186 | 5.0 | The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke. SSRF vulnerabilities allow the attacker to exploit the target system to make network requests on their | 2022-06-09 17:07:00 | 2022-06-02 14:15:00 |
| CVE-2019-12351 | 7.5 | An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma. | 2022-06-09 16:13:00 | 2022-06-02 14:15:00 |
| CVE-2019-12350 | 7.5 | An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma. | 2022-06-09 16:02:00 | 2022-06-02 14:15:00 |
| CVE-2019-12349 | 7.5 | An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter. | 2022-06-09 15:59:00 | 2022-06-02 14:15:00 |
| CVE-2021-42195 | 6.8 | An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() located in swfdump.c. It allows an attacker to cause code Execution. | 2022-06-09 15:22:00 | 2022-06-02 14:15:00 |
| CVE-2021-36890 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress. | 2022-06-09 15:08:00 | 2022-06-02 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: