| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1465 | 4.3 | The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue. | 2022-05-24 13:58:00 | 2022-05-16 15:15:00 |
| CVE-2021-23225 | 3.5 | Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during creation of a new user via "Copy" method at user_admin.php. | 2022-05-24 13:08:00 | 2022-01-19 21:15:00 |
| CVE-2019-11025 | 3.5 | In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS. | 2022-05-24 13:01:00 | 2019-04-08 23:29:00 |
| CVE-2018-10061 | 3.5 | Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used). | 2022-05-24 13:01:00 | 2018-04-12 16:29:00 |
| CVE-2018-10060 | 3.5 | Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php. | 2022-05-24 13:00:00 | 2018-04-12 16:29:00 |
| CVE-2021-27768 | 4.3 | Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario, the application's network traffic was intercepted us | 2022-05-24 12:57:00 | 2022-05-12 22:15:00 |
| CVE-2022-29383 | 7.5 | NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi. | 2022-05-24 12:50:00 | 2022-05-13 13:15:00 |
| CVE-2021-27673 | 3.5 | Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component. | 2022-05-23 22:42:00 | 2021-04-15 14:15:00 |
| CVE-2021-27308 | 3.5 | A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter. | 2022-05-23 22:32:00 | 2021-03-22 15:15:00 |
| CVE-2021-27358 | 5.0 | The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set. | 2022-05-23 22:32:00 | 2021-03-18 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: