| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-41185 | 4.0 | Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upg | 2021-10-27 19:33:00 | 2021-10-26 15:15:00 |
| CVE-2020-23041 | 4.3 | Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability allows attackers to execute arbitrary web scripts | 2021-10-27 19:24:00 | 2021-10-22 20:15:00 |
| CVE-2020-23048 | 4.3 | SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment parameters. | 2021-10-27 18:58:00 | 2021-10-22 20:15:00 |
| CVE-2020-23047 | 4.3 | Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting (XSS) vulnerability in the search input field of the search module. | 2021-10-27 18:57:00 | 2021-10-22 20:15:00 |
| CVE-2020-23040 | 5.0 | Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands. | 2021-10-27 18:43:00 | 2021-10-22 20:15:00 |
| CVE-2020-23037 | 7.5 | Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. | 2021-10-27 18:28:00 | 2021-10-22 20:15:00 |
| CVE-2020-23039 | 3.5 | Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload | 2021-10-27 18:26:00 | 2021-10-22 20:15:00 |
| CVE-2020-23038 | 5.0 | Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables. | 2021-10-27 18:20:00 | 2021-10-22 20:15:00 |
| CVE-2021-24699 | 3.5 | The Easy Media Download WordPress plugin before 1.1.7 does not escape the text argument of its shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. | 2021-10-27 18:01:00 | 2021-10-25 14:15:00 |
| CVE-2021-24785 | 3.5 | The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. | 2021-10-27 17:58:00 | 2021-10-25 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: