| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-20067 | 5.0 | The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress | 2021-11-03 15:06:00 | 2021-11-01 09:15:00 |
| CVE-2015-10001 | 4.3 | The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting paylo | 2021-11-03 14:41:00 | 2021-11-01 09:15:00 |
| CVE-2020-36503 | 6.0 | The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue | 2021-11-03 14:35:00 | 2021-11-01 09:15:00 |
| CVE-2021-3906 | 4.0 | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type | 2021-11-03 14:30:00 | 2021-10-27 22:15:00 |
| CVE-2021-24539 | 2.1 | The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming Soon mode is enabled, even when the unfiltered_html | 2021-11-03 14:21:00 | 2021-11-01 09:15:00 |
| CVE-2020-25881 | 4.3 | A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg of the master version of RKCMS. This vulnerability allows for an attacker to perform a dir | 2021-11-03 14:05:00 | 2021-10-29 20:15:00 |
| CVE-2021-37748 | 9.0 | Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary code as root via a crafted manage_if setting, thus bypassing the intended | 2021-11-03 14:00:00 | 2021-10-28 12:15:00 |
| CVE-2021-24572 | 4.3 | The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post wa | 2021-11-03 13:48:00 | 2021-11-01 09:15:00 |
| CVE-2020-25873 | 4.0 | A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter. | 2021-11-03 13:48:00 | 2021-10-29 20:15:00 |
| CVE-2020-25872 | 4.0 | A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter. | 2021-11-03 13:43:00 | 2021-10-29 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: