| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-43855 | 3.5 | Wiki.js is a wiki app built on node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through a SVG file upload made via a custom request with a fake MIME type. By creating a crafted SVG file, a malicious Wiki.js user may s | 2022-01-07 14:01:00 | 2021-12-27 18:15:00 |
| CVE-2021-45232 | 7.5 | In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly | 2022-01-07 13:45:00 | 2021-12-27 15:15:00 |
| CVE-2021-45526 | 6.5 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before 1.0.0.30, R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R7000 before 1.0.11.126, R7900 be | 2022-01-07 13:38:00 | 2021-12-26 01:15:00 |
| CVE-2021-45525 | 6.5 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.50, R6400v2 before 1.0.4.118, R6700 before 1.0.2.8, R6700v3 before 1.0.4.118, R6900 before 1.0.2.8, R6900P bef | 2022-01-07 13:35:00 | 2021-12-26 01:15:00 |
| CVE-2021-40170 | 5.8 | An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adv | 2022-01-06 21:14:00 | 2021-12-15 07:15:00 |
| CVE-2021-38961 | 4.3 | IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | 2022-01-06 21:05:00 | 2021-12-27 17:15:00 |
| CVE-2020-36513 | 7.5 | An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. read_up_to may read from uninitialized memory locations. | 2022-01-06 20:42:00 | 2021-12-27 00:15:00 |
| CVE-2020-36512 | 7.5 | An issue was discovered in the buffoon crate through 2020-12-31 for Rust. InputStream::read_exact may read from uninitialized memory locations. | 2022-01-06 20:39:00 | 2021-12-27 00:15:00 |
| CVE-2021-25993 | 3.5 | In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged (editor) user can upload a SVG file that contains malicious JavaScript while uploading assets in the page. That will send the JWT | 2022-01-06 20:38:00 | 2021-12-29 17:15:00 |
| CVE-2021-45903 | 4.3 | A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x before 7.12.2, allows a remote attacker to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE- | 2022-01-06 20:35:00 | 2021-12-28 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: