| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-44912 | 3.5 | In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabil | 2022-02-16 22:25:00 | 2022-02-09 16:15:00 |
| CVE-2021-44911 | 3.5 | XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading the Mouse over button and When selected button, there is no restriction on the file suffix, which leads to any file uploading to the | 2022-02-16 22:15:00 | 2022-02-09 16:15:00 |
| CVE-2021-44969 | 3.5 | Taocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Management Column component. | 2022-02-16 21:03:00 | 2022-02-10 23:15:00 |
| CVE-2021-44970 | 3.5 | MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin/page-edit.php. | 2022-02-16 20:18:00 | 2022-02-10 23:15:00 |
| CVE-2022-24321 | 5.0 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo | 2022-02-16 19:43:00 | 2022-02-09 23:15:00 |
| CVE-2022-23047 | 3.5 | Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site Title" and "Site Header" parameters while updating the site settings on "/exponentcms/administration/configure_ | 2022-02-16 18:51:00 | 2022-02-09 23:15:00 |
| CVE-2022-22812 | 4.3 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the ta | 2022-02-16 18:36:00 | 2022-02-09 23:15:00 |
| CVE-2022-22810 | 5.0 | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for | 2022-02-16 18:23:00 | 2022-02-09 23:15:00 |
| CVE-2022-23627 | 4.0 | ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code, introduced in version V5.2.2.2, the program didn't adequately verify effective access of the user sen | 2022-02-16 17:23:00 | 2022-02-08 23:15:00 |
| CVE-2021-22817 | 4.6 | A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer ( | 2022-02-16 16:57:00 | 2022-02-09 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: