| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24617 | 4.3 | The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues | 2021-10-21 19:21:00 | 2021-10-18 14:15:00 |
| CVE-2021-24622 | 3.5 | The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when th | 2021-10-21 19:14:00 | 2021-10-18 14:15:00 |
| CVE-2021-24612 | 3.5 | The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unf | 2021-10-21 19:14:00 | 2021-10-18 14:15:00 |
| CVE-2021-29878 | 3.5 | IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to creden | 2021-10-21 18:52:00 | 2021-10-18 17:15:00 |
| CVE-2021-40987 | 9.0 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x p | 2021-10-21 18:37:00 | 2021-10-15 14:15:00 |
| CVE-2021-42098 | 6.5 | An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell. | 2021-10-21 18:34:00 | 2021-10-18 14:15:00 |
| CVE-2021-40992 | 6.5 | A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9- | 2021-10-21 18:26:00 | 2021-10-15 14:15:00 |
| CVE-2021-24754 | 6.5 | The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue | 2021-10-21 17:17:00 | 2021-10-18 14:15:00 |
| CVE-2021-41148 | 6.5 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prior to version 11.16.99.173 of Community Edition and versions 11.16-6 and 11.15-8 of Enterprise Edition, an attacker with the abilit | 2021-10-21 17:14:00 | 2021-10-15 14:15:00 |
| CVE-2021-24760 | 3.5 | The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks. | 2021-10-21 17:11:00 | 2021-10-18 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: