| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-10193 | 6.5 | A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perfo | 2021-10-28 12:14:00 | 2019-07-11 19:15:00 |
| CVE-2019-10192 | 6.5 | A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis | 2021-10-28 12:14:00 | 2019-07-11 19:15:00 |
| CVE-2016-8377 | 6.0 | An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes | 2021-10-28 11:55:00 | 2017-02-13 21:59:00 |
| CVE-2017-6023 | 9.0 | An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions pr | 2021-10-28 11:54:00 | 2017-03-16 04:59:00 |
| CVE-2020-21250 | - | CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php. | 2021-10-28 02:51:00 | 2021-10-27 20:15:00 |
| CVE-2021-35230 | 7.2 | As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry. | 2021-10-28 01:17:00 | 2021-10-22 12:15:00 |
| CVE-2021-21319 | 3.5 | Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disa | 2021-10-28 01:12:00 | 2021-10-25 16:15:00 |
| CVE-2021-24885 | 4.3 | The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting | 2021-10-28 01:09:00 | 2021-10-25 14:15:00 |
| CVE-2020-20908 | 3.5 | Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field. | 2021-10-28 01:07:00 | 2021-10-25 15:15:00 |
| CVE-2020-36490 | 3.5 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. | 2021-10-28 00:57:00 | 2021-10-22 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: