| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-34855 | 2.1 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to | 2021-10-27 22:18:00 | 2021-10-25 17:15:00 |
| CVE-2021-38449 | 7.5 | Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product. | 2021-10-27 21:22:00 | 2021-10-22 12:15:00 |
| CVE-2021-41172 | 3.5 | AS_Redis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configur | 2021-10-27 20:27:00 | 2021-10-26 14:15:00 |
| CVE-2021-41792 | 5.0 | An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. | 2021-10-27 20:24:00 | 2021-10-21 09:15:00 |
| CVE-2020-23042 | 4.3 | Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows attackers to execute arbitrary web scripts or HTML | 2021-10-27 20:04:00 | 2021-10-22 20:15:00 |
| CVE-2021-41791 | 3.5 | An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited | 2021-10-27 20:01:00 | 2021-10-21 09:15:00 |
| CVE-2020-23051 | 4.3 | Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the firstname and lastname parameters of the registration form & loginsystem input fields. | 2021-10-27 19:48:00 | 2021-10-22 20:15:00 |
| CVE-2021-24769 | 6.5 | The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before using it in a SQL statement in the Permalink Manager page, leading to a SQL Injection | 2021-10-27 19:40:00 | 2021-10-25 14:15:00 |
| CVE-2021-24744 | 3.5 | The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages. which could allow high privilege users to perform Cross-Site Scripting attacks even when the u | 2021-10-27 19:37:00 | 2021-10-25 14:15:00 |
| CVE-2021-24662 | 6.5 | The Game Server Status WordPress plugin through 1.0 does not validate or escape the server_id parameter before using it in SQL statement, leading to an Authenticated SQL Injection in an admin page | 2021-10-27 19:37:00 | 2021-10-25 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: