| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-26610 | 6.5 | The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code. | 2021-11-01 17:24:00 | 2021-10-27 01:15:00 |
| CVE-2020-22312 | 4.3 | A cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php function of HZNUOJ v1.0. | 2021-11-01 16:03:00 | 2021-10-28 15:15:00 |
| CVE-2021-22047 | 4.3 | In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under U | 2021-11-01 15:59:00 | 2021-10-28 16:15:00 |
| CVE-2021-22097 | 6.8 | In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious | 2021-11-01 15:57:00 | 2021-10-28 16:15:00 |
| CVE-2011-4126 | 9.3 | Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere. | 2021-11-01 15:51:00 | 2021-10-27 01:15:00 |
| CVE-2011-4125 | 10.0 | A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root. | 2021-11-01 15:47:00 | 2021-10-27 01:15:00 |
| CVE-2011-4124 | 10.0 | Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges. | 2021-11-01 15:41:00 | 2021-10-27 01:15:00 |
| CVE-2021-26607 | 10.0 | An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. | 2021-11-01 15:37:00 | 2021-10-26 13:15:00 |
| CVE-2021-3745 | 6.0 | flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type | 2021-11-01 15:26:00 | 2021-10-28 17:15:00 |
| CVE-2017-18195 | 5.0 | An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enumerate comments from all blog posts by POSTing requests to /index.php/tools/required/conversations/view_ajax with incremental 'cnvI | 2021-11-01 14:43:00 | 2018-02-26 17:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: