| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24843 | 4.3 | The SupportCandy WordPress plugin before 2.2.7 does not have CRSF check in its wpsc_tickets AJAX action, which could allow attackers to make a logged in admin call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_act | 2022-02-10 20:33:00 | 2022-02-07 16:15:00 |
| CVE-2021-46359 | 5.0 | FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks. | 2022-02-10 20:32:00 | 2022-02-07 13:15:00 |
| CVE-2022-0149 | 4.3 | The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page. | 2022-02-10 20:26:00 | 2022-02-07 16:16:00 |
| CVE-2022-21392 | 7.2 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker | 2022-02-10 20:12:00 | 2022-01-19 12:15:00 |
| CVE-2018-1000518 | 5.0 | aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustio | 2022-02-10 20:10:00 | 2018-06-26 16:29:00 |
| CVE-2021-20641 | 4.3 | Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device | 2022-02-10 19:47:00 | 2021-02-12 07:15:00 |
| CVE-2021-20639 | 7.7 | LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. | 2022-02-10 19:47:00 | 2021-02-12 07:15:00 |
| CVE-2021-20638 | 7.7 | LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. | 2022-02-10 19:47:00 | 2021-02-12 07:15:00 |
| CVE-2021-20636 | 4.3 | Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the devi | 2022-02-10 19:47:00 | 2021-02-12 07:15:00 |
| CVE-2021-20635 | 3.3 | Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network. | 2022-02-10 19:47:00 | 2021-02-12 07:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: