| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-5299 | 4.6 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, any users with the ability to modify any data that could eventually be exported as a CSV file from the `ImportExportController` could potentially introduce a C | 2022-06-30 14:46:00 | 2020-06-03 22:15:00 |
| CVE-2020-5298 | 3.5 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, a user with the ability to use the import functionality of the `ImportExportController` behavior can be socially engineered by an attacker to upload a maliciou | 2022-06-30 14:46:00 | 2020-06-03 22:15:00 |
| CVE-2020-5297 | 4.0 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to upload jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, xml | 2022-06-30 14:46:00 | 2020-06-03 22:15:00 |
| CVE-2020-5296 | 4.0 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated | 2022-06-30 14:46:00 | 2020-06-03 22:15:00 |
| CVE-2020-5295 | 4.0 | In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user | 2022-06-30 14:39:00 | 2020-06-03 22:15:00 |
| CVE-2021-26638 | 10.0 | Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control. | 2022-06-30 14:33:00 | 2022-06-23 17:15:00 |
| CVE-2021-25088 | 3.5 | The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is | 2022-06-30 14:24:00 | 2022-06-20 11:15:00 |
| CVE-2021-20421 | 4.0 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or faci | 2022-06-30 14:01:00 | 2022-06-24 17:15:00 |
| CVE-2021-25104 | 4.3 | The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue | 2022-06-30 13:56:00 | 2022-06-20 11:15:00 |
| CVE-2021-20551 | 2.1 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 199149. | 2022-06-30 13:51:00 | 2022-06-24 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: