| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24774 | 6.5 | The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues | 2021-10-27 17:51:00 | 2021-10-25 14:15:00 |
| CVE-2021-34857 | 4.6 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit t | 2021-10-27 17:47:00 | 2021-10-25 17:15:00 |
| CVE-2021-42539 | 6.5 | The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change. | 2021-10-27 17:12:00 | 2021-10-22 14:15:00 |
| CVE-2021-38467 | 5.5 | A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition. | 2021-10-27 16:57:00 | 2021-10-22 12:15:00 |
| CVE-2021-38455 | 4.0 | The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner calls without checking the type of the parameter or the value. | 2021-10-27 16:50:00 | 2021-10-22 12:15:00 |
| CVE-2020-23043 | 6.5 | Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file. | 2021-10-27 16:43:00 | 2021-10-22 20:15:00 |
| CVE-2021-38459 | 7.5 | The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the S | 2021-10-27 16:26:00 | 2021-10-22 12:15:00 |
| CVE-2021-42542 | 6.5 | The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure. | 2021-10-27 16:12:00 | 2021-10-22 14:15:00 |
| CVE-2021-42536 | 4.0 | The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables. | 2021-10-27 16:10:00 | 2021-10-22 14:15:00 |
| CVE-2021-42534 | 4.3 | The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms. | 2021-10-27 16:07:00 | 2021-10-22 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: