| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-41971 | 6.0 | Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL. | 2021-10-22 13:00:00 | 2021-10-18 15:15:00 |
| CVE-2021-32609 | 3.5 | Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (including scripts) into the page. | 2021-10-22 12:55:00 | 2021-10-18 15:15:00 |
| CVE-2021-24743 | 3.5 | The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding posts to perform stored XSS. | 2021-10-22 12:42:00 | 2021-10-18 14:15:00 |
| CVE-2021-24740 | 3.5 | The Tutor LMS WordPress plugin before 1.9.9 does not escape some of its settings before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallow | 2021-10-22 12:31:00 | 2021-10-18 14:15:00 |
| CVE-2021-3881 | 7.5 | libmobi is vulnerable to Out-of-bounds Read | 2021-10-22 12:29:00 | 2021-10-15 14:15:00 |
| CVE-2021-24735 | 4.3 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous Play" setting via a CSRF attack. | 2021-10-22 12:21:00 | 2021-10-18 14:15:00 |
| CVE-2011-1497 | 4.3 | A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6. | 2021-10-22 00:01:00 | 2021-10-19 14:15:00 |
| CVE-2021-3846 | 6.5 | firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type | 2021-10-22 00:00:00 | 2021-10-19 13:15:00 |
| CVE-2021-3851 | 4.9 | firefly-iii is vulnerable to URL Redirection to Untrusted Site | 2021-10-21 23:59:00 | 2021-10-19 13:15:00 |
| CVE-2021-3869 | 5.0 | corenlp is vulnerable to Improper Restriction of XML External Entity Reference | 2021-10-21 23:58:00 | 2021-10-19 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: