| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-23605 | 2.1 | Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemera | 2022-02-11 03:05:00 | 2022-02-04 23:15:00 |
| CVE-2022-23600 | 3.5 | fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof SAML authentication with missing audience verification. This impacts deployments using SAML SSO in two specific cases: 1. A malicio | 2022-02-11 03:04:00 | 2022-02-04 23:15:00 |
| CVE-2021-25096 | 6.4 | The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL | 2022-02-10 22:07:00 | 2022-02-07 16:15:00 |
| CVE-2021-25103 | 2.6 | The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the url_addon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. | 2022-02-10 21:34:00 | 2022-02-07 16:15:00 |
| CVE-2021-25106 | 3.5 | The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as | 2022-02-10 21:24:00 | 2022-02-07 16:15:00 |
| CVE-2021-24880 | 3.5 | The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks | 2022-02-10 21:07:00 | 2022-02-07 16:15:00 |
| CVE-2021-46389 | 5.0 | IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters. | 2022-02-10 21:02:00 | 2022-02-07 14:15:00 |
| CVE-2021-25105 | 3.5 | The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 2022-02-10 20:52:00 | 2022-02-07 16:15:00 |
| CVE-2022-0148 | 3.5 | The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page. | 2022-02-10 20:48:00 | 2022-02-07 16:16:00 |
| CVE-2021-25114 | 7.5 | The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection | 2022-02-10 20:39:00 | 2022-02-07 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: