| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-37568 | 9.3 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write). | 2022-01-06 17:44:00 | 2021-12-26 00:15:00 |
| CVE-2021-24797 | 4.3 | The Tickera WordPress plugin before 3.4.8.3 does not properly sanitise and escape the Name fields of booked Events before outputting them in the Orders admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks a | 2022-01-06 17:42:00 | 2021-12-27 11:15:00 |
| CVE-2021-24979 | 4.3 | The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting | 2022-01-06 17:38:00 | 2021-12-27 11:15:00 |
| CVE-2021-24967 | 4.3 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform Cross-Site Scripting attacks against logged in admin viewing the inserted L | 2022-01-06 17:28:00 | 2021-12-27 11:15:00 |
| CVE-2021-24980 | 4.3 | The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page | 2022-01-06 17:27:00 | 2021-12-27 11:15:00 |
| CVE-2019-25054 | 5.0 | An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault (upon attempted dereference of an uninitialized descriptor) because of an erroneous IcmpTransportChannelIterator compiler optimization. | 2022-01-06 17:16:00 | 2021-12-27 00:15:00 |
| CVE-2021-24984 | 4.3 | The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting | 2022-01-06 17:11:00 | 2021-12-27 11:15:00 |
| CVE-2021-24992 | 3.5 | The Smart Floating / Sticky Buttons WordPress plugin before 2.5.5 does not sanitise and escape some parameter before outputting them in attributes and page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the | 2022-01-06 16:57:00 | 2021-12-27 11:15:00 |
| CVE-2021-45715 | 5.0 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_window_function has a use-after-free. | 2022-01-06 16:57:00 | 2021-12-26 22:15:00 |
| CVE-2021-24902 | 3.5 | The Typebot | Build beautiful conversational forms WordPress plugin before 1.4.3 does not sanitise and escape the Publish ID setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capabil | 2022-01-06 16:55:00 | 2021-12-27 11:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: