| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-11476 | 9.0 | Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file. | 2021-11-01 14:42:00 | 2020-07-28 21:15:00 |
| CVE-2020-14961 | 5.0 | Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value. | 2021-11-01 14:42:00 | 2020-06-22 00:15:00 |
| CVE-2020-24986 | 9.0 | Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands. | 2021-11-01 14:41:00 | 2020-09-04 20:15:00 |
| CVE-2021-22958 | 7.5 | A Server-Side Request Forgery vulnerability was found in concrete5 < 8.5.5 that allowed a decimal notation encoded IP address to bypass the limitations in place for localhost allowing interaction with local services. Impact can vary depending on serv | 2021-11-01 14:39:00 | 2021-10-07 14:15:00 |
| CVE-2017-12061 | 4.3 | An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation script are not properly sanitized before being output, allowing remote attackers to inject | 2021-11-01 14:39:00 | 2017-08-01 15:29:00 |
| CVE-2021-41728 | 4.3 | Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles. | 2021-10-29 20:41:00 | 2021-10-28 15:15:00 |
| CVE-2020-25422 | 3.5 | A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | 2021-10-29 20:38:00 | 2021-10-28 19:15:00 |
| CVE-2021-29713 | 3.5 | IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru | 2021-10-29 20:31:00 | 2021-10-27 16:15:00 |
| CVE-2021-20526 | 5.0 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force | 2021-10-29 20:30:00 | 2021-10-27 16:15:00 |
| CVE-2019-18256 | 2.1 | BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryp | 2021-10-29 19:58:00 | 2020-06-29 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: