| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-32836 | 6.8 | ZStack is open source IaaS(infrastructure as a service) software. In ZStack before versions 3.10.12 and 4.1.6 there is a pre-auth unsafe deserialization vulnerability in the REST API. An attacker in control of the request body will be able to provide | 2022-04-25 17:26:00 | 2021-09-09 02:15:00 |
| CVE-2021-36024 | 6.5 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upl | 2022-04-25 17:26:00 | 2021-09-01 15:15:00 |
| CVE-2021-36012 | 4.0 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business logic error in the placeOrder graphql mutation. An authenticated attacker can leverage this vulnerability to altar the price of a | 2022-04-25 17:25:00 | 2021-09-01 15:15:00 |
| CVE-2021-32772 | 4.3 | Poddycast is a podcast app made with Electron. Prior to version 0.8.1, an attacker can create a podcast or episode with malicious characters and execute commands on the client machine. The application does not clean the HTML characters of the podcast | 2022-04-25 17:25:00 | 2021-08-03 15:15:00 |
| CVE-2021-32796 | 5.0 | xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. T | 2022-04-25 17:25:00 | 2021-07-27 22:15:00 |
| CVE-2021-32673 | 7.5 | reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version | 2022-04-25 17:23:00 | 2021-06-08 17:15:00 |
| CVE-2021-3509 | 4.3 | A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documenta | 2022-04-25 17:08:00 | 2021-05-27 00:15:00 |
| CVE-2021-27392 | 4.0 | A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Vid | 2022-04-25 17:05:00 | 2021-04-22 21:15:00 |
| CVE-2021-43015 | 9.3 | Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is requi | 2022-04-25 16:55:00 | 2021-11-22 16:15:00 |
| CVE-2021-42738 | 9.3 | Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is requ | 2022-04-25 16:55:00 | 2021-11-22 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: