| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-41619 | 9.0 | An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code execution via the application startup configuration. The installation configuration user interface (available to administrators) allows specifying arbitrary | 2021-11-03 12:56:00 | 2021-10-27 14:15:00 |
| CVE-2021-22038 | 6.5 | On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This temporary location is not randomized and does not | 2021-11-03 12:53:00 | 2021-10-29 12:15:00 |
| CVE-2021-31862 | 4.3 | SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication. | 2021-11-03 12:51:00 | 2021-10-29 11:15:00 |
| CVE-2021-3441 | 3.5 | A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS). | 2021-11-03 12:50:00 | 2021-10-29 12:15:00 |
| CVE-2021-41189 | 9.0 | DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only exists in 7.0 and does not impact 6.x or below | 2021-11-03 12:47:00 | 2021-10-29 18:15:00 |
| CVE-2021-41194 | 6.8 | FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access | 2021-11-03 12:26:00 | 2021-10-28 20:15:00 |
| CVE-2020-35249 | 4.3 | Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name parameter to the add client feature. | 2021-11-03 01:43:00 | 2021-11-02 11:15:00 |
| CVE-2021-39179 | 6.5 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component in DHIS2 Server allows authenticated remote attackers to execute arbitrary SQL commands via | 2021-11-03 00:55:00 | 2021-10-29 14:15:00 |
| CVE-2021-41186 | 5.0 | Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parser_apache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service (ReDoS) vulnerability. A bro | 2021-11-03 00:11:00 | 2021-10-29 14:15:00 |
| CVE-2020-6492 | - | Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. | 2021-11-03 00:06:00 | 2021-11-02 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: