| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-38430 | 6.8 | FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code. | 2021-10-21 20:33:00 | 2021-10-18 13:15:00 |
| CVE-2021-38426 | 6.8 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code. | 2021-10-21 20:32:00 | 2021-10-18 13:15:00 |
| CVE-2021-38440 | 4.3 | FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information. | 2021-10-21 20:24:00 | 2021-10-18 13:15:00 |
| CVE-2021-38438 | 6.8 | A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary code execution. | 2021-10-21 20:24:00 | 2021-10-18 13:15:00 |
| CVE-2021-24734 | 3.5 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. | 2021-10-21 20:00:00 | 2021-10-18 14:15:00 |
| CVE-2021-24413 | 3.5 | The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with | 2021-10-21 19:55:00 | 2021-10-18 14:15:00 |
| CVE-2021-24702 | 2.1 | The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course settings, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltred_html capability is disallowed | 2021-10-21 19:49:00 | 2021-10-18 14:15:00 |
| CVE-2021-39864 | 4.3 | Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to | 2021-10-21 19:49:00 | 2021-10-15 15:15:00 |
| CVE-2021-40729 | 4.3 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An | 2021-10-21 19:41:00 | 2021-10-15 15:15:00 |
| CVE-2021-24516 | 3.5 | The PlanSo Forms WordPress plugin through 2.6.3 does not escape the title of its Form before outputting it in attributes, allowing high privilege users such as admin to set XSS payload in it, even when the unfiltered_html is disallowed, leading to an | 2021-10-21 19:24:00 | 2021-10-18 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: