| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1398 | 4.0 | The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF at | 2022-05-24 18:33:00 | 2022-05-16 15:15:00 |
| CVE-2022-28930 | 7.5 | ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml.. | 2022-05-24 18:23:00 | 2022-05-15 17:15:00 |
| CVE-2021-42171 | 6.5 | Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse system files, browse local resources, attack other servers, and exploit the local vulnerabilit | 2022-05-24 18:18:00 | 2022-03-14 15:15:00 |
| CVE-2020-9467 | 3.5 | Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function. | 2022-05-24 17:46:00 | 2020-03-26 20:15:00 |
| CVE-2020-8778 | 3.5 | Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project. | 2022-05-24 17:43:00 | 2020-03-02 19:15:00 |
| CVE-2020-8776 | 3.5 | Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file. | 2022-05-24 17:42:00 | 2020-03-02 19:15:00 |
| CVE-2020-8777 | 3.5 | Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document. | 2022-05-24 17:40:00 | 2020-03-02 19:15:00 |
| CVE-2022-29354 | 7.5 | An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file. | 2022-05-24 17:33:00 | 2022-05-16 14:15:00 |
| CVE-2022-29353 | 7.5 | An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename. | 2022-05-24 17:31:00 | 2022-05-16 14:15:00 |
| CVE-2020-8244 | 6.4 | A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, | 2022-05-24 17:31:00 | 2020-08-30 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: