| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-36513 | 5.0 | An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value. | 2021-10-22 15:11:00 | 2021-10-18 17:15:00 |
| CVE-2021-38462 | 7.5 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform op | 2021-10-22 15:06:00 | 2021-10-19 13:15:00 |
| CVE-2021-39349 | 2.1 | The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-author-bio-box-admin.php file which allowed attackers wi | 2021-10-22 14:48:00 | 2021-10-15 13:15:00 |
| CVE-2021-38474 | 5.0 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an attacker to execute a brute-force password attack with no time limitation and witho | 2021-10-22 14:47:00 | 2021-10-19 13:15:00 |
| CVE-2021-38468 | 3.5 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack sessions of users connected to the system. | 2021-10-22 14:47:00 | 2021-10-19 13:15:00 |
| CVE-2021-38466 | 4.3 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an | 2021-10-22 14:45:00 | 2021-10-19 13:15:00 |
| CVE-2021-38472 | 4.3 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by sending a link to an administrator that frames the router’s management portal | 2021-10-22 14:12:00 | 2021-10-19 13:15:00 |
| CVE-2021-38470 | 6.5 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device. | 2021-10-22 14:05:00 | 2021-10-19 13:15:00 |
| CVE-2021-41152 | 4.0 | OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download | 2021-10-22 13:52:00 | 2021-10-18 21:15:00 |
| CVE-2021-41153 | 7.5 | The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In `evm` crate `< 0.31.0`, `JUMPI` opcode's condition is checked after the destination validity check. However, according to Geth and OpenEthereum, the condition check should ha | 2021-10-22 13:42:00 | 2021-10-18 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: