| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-42566 | 4.3 | myfactory.FMS before 7.1-912 allows XSS via the Error parameter. | 2021-10-21 16:49:00 | 2021-10-18 08:15:00 |
| CVE-2021-42565 | 4.3 | myfactory.FMS before 7.1-912 allows XSS via the UID parameter. | 2021-10-21 16:46:00 | 2021-10-18 08:15:00 |
| CVE-2021-40986 | 9.0 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x p | 2021-10-21 16:20:00 | 2021-10-15 14:15:00 |
| CVE-2021-40988 | 9.0 | A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to | 2021-10-21 15:29:00 | 2021-10-15 14:15:00 |
| CVE-2021-40994 | 6.5 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x p | 2021-10-21 15:13:00 | 2021-10-15 15:15:00 |
| CVE-2021-40993 | 5.5 | A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9- | 2021-10-21 15:06:00 | 2021-10-15 15:15:00 |
| CVE-2021-41147 | 6.5 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prior to version 11.16.99.173 of Community Edition and versions 11.16-6 and 11.15-8 of Enterprise Edition, an attacker with admin righ | 2021-10-21 14:57:00 | 2021-10-15 14:15:00 |
| CVE-2020-8167 | 4.3 | A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains. | 2021-10-21 14:35:00 | 2020-06-19 18:15:00 |
| CVE-2021-22903 | 5.8 | The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users | 2021-10-21 14:32:00 | 2021-06-11 16:15:00 |
| CVE-2021-24675 | 4.3 | The One User Avatar WordPress plugin before 2.3.7 does not check for CSRF when updating the Avatar in page where the [avatar_upload] shortcode is embed. As a result, attackers could make logged in user change their avatar via a CSRF attack | 2021-10-20 22:18:00 | 2021-10-18 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: