| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-31373 | 3.5 | A persistent Cross-Site Scripting (XSS) vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal se | 2021-10-27 12:38:00 | 2021-10-19 19:15:00 |
| CVE-2021-36357 | 7.5 | An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp | 2021-10-27 12:30:00 | 2021-10-22 12:15:00 |
| CVE-2021-20120 | 6.8 | The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker could make configuration changes (such as changing the administrative password) without the | 2021-10-27 12:19:00 | 2021-10-21 17:15:00 |
| CVE-2021-24420 | 3.5 | The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table. | 2021-10-27 12:09:00 | 2021-07-12 20:15:00 |
| CVE-2021-42011 | 4.6 | An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability | 2021-10-27 11:47:00 | 2021-10-21 08:15:00 |
| CVE-2021-31364 | 4.3 | An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthentica | 2021-10-27 00:38:00 | 2021-10-19 19:15:00 |
| CVE-2021-2483 | 5.5 | Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content Item Manager). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network acc | 2021-10-27 00:36:00 | 2021-10-20 11:16:00 |
| CVE-2021-2484 | 5.5 | Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intelligence). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker w | 2021-10-27 00:34:00 | 2021-10-20 11:16:00 |
| CVE-2021-2485 | 5.5 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP | 2021-10-27 00:33:00 | 2021-10-20 11:16:00 |
| CVE-2021-38481 | 7.5 | The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another | 2021-10-27 00:32:00 | 2021-10-22 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: