Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-24864 6.5 The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue 2022-03-07 18:03:00
CVE-2021-22433 7.5 There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 2022-03-07 17:58:00
CVE-2021-22432 10.0 There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. 2022-03-07 17:58:00
CVE-2021-22431 7.5 There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access. 2022-03-07 17:57:00
CVE-2021-22429 10.0 There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 2022-03-07 17:54:00
CVE-2021-24898 3.5 The EditableTable WordPress plugin through 0.1.4 does not sanitise and escape any of the Table and Column fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed 2022-03-07 17:53:00
CVE-2021-24901 3.5 The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. 2022-03-07 17:51:00
CVE-2021-22426 7.5 There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed. 2022-03-07 17:50:00
CVE-2021-24903 3.5 The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed. 2022-03-07 17:47:00
CVE-2021-22395 5.0 There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality. 2022-03-07 17:44:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39688
Zapisa po stranici: