| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-37122 | 3.3 | There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R0 | 2021-10-28 15:05:00 | 2021-10-27 01:15:00 |
| CVE-2015-8857 | 7.5 | The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging imp | 2021-10-28 15:05:00 | 2017-01-23 21:59:00 |
| CVE-2021-41866 | 3.5 | MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly. | 2021-10-28 15:03:00 | 2021-10-26 22:15:00 |
| CVE-2021-24544 | 3.5 | The Responsive WordPress Slider WordPress plugin through 2.2.0 does not sanitise and escape some of the Slider options, allowing Cross-Site Scripting payloads to be set in them. Furthermore, as by default any authenticated user is allowed to create S | 2021-10-28 14:39:00 | 2021-10-25 14:15:00 |
| CVE-2021-34854 | 7.2 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit th | 2021-10-28 14:37:00 | 2021-10-25 17:15:00 |
| CVE-2021-24414 | 3.5 | The Video Player for YouTube WordPress plugin before 1.4 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page | 2021-10-28 14:18:00 | 2021-10-25 14:15:00 |
| CVE-2021-24381 | 3.5 | The Ninja Forms Contact Form WordPress plugin before 3.5.8.2 does not sanitise and escape the custom class name of the form field created, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html ca | 2021-10-28 14:17:00 | 2021-10-25 14:15:00 |
| CVE-2021-40526 | 5.0 | Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflow in the network server handli | 2021-10-28 14:16:00 | 2021-10-25 11:15:00 |
| CVE-2021-24514 | 3.5 | The Visual Form Builder WordPress plugin before 3.0.4 does not sanitise or escape its Form Name, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even when the unfiltered_html capability is disallowed | 2021-10-28 14:08:00 | 2021-10-25 14:15:00 |
| CVE-2019-10211 | 7.5 | Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory. | 2021-10-28 13:59:00 | 2019-10-29 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: