| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-22564 | 2.1 | For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to a | 2021-11-02 18:52:00 | 2021-11-01 13:15:00 |
| CVE-2019-14887 | 6.4 | A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version | 2021-11-02 18:10:00 | 2020-03-16 15:15:00 |
| CVE-2018-12613 | 6.5 | An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and | 2021-11-02 17:59:00 | 2018-06-21 20:29:00 |
| CVE-2019-15576 | 5.0 | An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint. | 2021-11-02 17:58:00 | 2019-12-18 21:15:00 |
| CVE-2019-15577 | 4.0 | An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed project milestones to be disclosed via groups browsing. | 2021-11-02 17:52:00 | 2019-12-18 21:15:00 |
| CVE-2019-15582 | 5.0 | An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maintainer to add any private group to a protected environment. | 2021-11-02 17:50:00 | 2020-01-28 03:15:00 |
| CVE-2019-15579 | 5.0 | An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a confidential issue in a private project would be disclosed to a guest via milestones. | 2021-11-02 17:50:00 | 2020-01-28 03:15:00 |
| CVE-2020-25911 | 6.4 | A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (DOS). | 2021-11-02 17:33:00 | 2021-10-31 19:15:00 |
| CVE-2021-24813 | 3.5 | The Events Made Easy WordPress plugin before 2.2.24 does not sanitise and escape Custom Field Names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed | 2021-11-02 17:24:00 | 2021-11-01 09:15:00 |
| CVE-2021-24799 | 4.3 | The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. | 2021-11-02 17:22:00 | 2021-11-01 09:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: