| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-3863 | 4.3 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2021-10-21 23:58:00 | 2021-10-19 13:15:00 |
| CVE-2021-3879 | 3.5 | snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2021-10-21 23:57:00 | 2021-10-19 13:15:00 |
| CVE-2021-25968 | 3.5 | In “OpenCMS”, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts are executed in a victim’s browser when they open t | 2021-10-21 23:39:00 | 2021-10-19 09:15:00 |
| CVE-2021-42650 | 4.3 | Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates. | 2021-10-21 23:37:00 | 2021-10-18 21:15:00 |
| CVE-2020-8291 | 4.3 | A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks. | 2021-10-21 22:59:00 | 2021-10-18 13:15:00 |
| CVE-2021-22961 | 7.5 | A code injection vulnerability exists within the firewall software of GlassWire v2.1.167 that could lead to arbitrary code execution from a file in the user path on first execution. | 2021-10-21 22:53:00 | 2021-10-18 13:15:00 |
| CVE-2010-2496 | 2.1 | stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and | 2021-10-21 22:49:00 | 2021-10-18 13:15:00 |
| CVE-2021-40728 | 6.8 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free vulnerability in the processing of the GetURL function on a global obje | 2021-10-21 21:14:00 | 2021-10-15 15:15:00 |
| CVE-2021-40724 | 6.8 | Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitatio | 2021-10-21 21:12:00 | 2021-10-15 15:15:00 |
| CVE-2021-38434 | 6.8 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could leverage this vulnerability to execute arbitrary cod | 2021-10-21 20:36:00 | 2021-10-18 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: