| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-38432 | 7.5 | FATEK Automation Communication Server Versions 1.13 and prior lacks proper validation of user-supplied data, which could result in a stack-based buffer overflow condition and allow an attacker to remotely execute code. | 2021-10-20 20:08:00 | 2021-10-15 15:15:00 |
| CVE-2021-42335 | 3.5 | Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack. | 2021-10-20 19:54:00 | 2021-10-15 12:15:00 |
| CVE-2021-3874 | 4.0 | bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2021-10-20 19:40:00 | 2021-10-15 14:15:00 |
| CVE-2021-42334 | 6.5 | The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL commands into the parameters of the elective course management page to obtain all database and administrator permissions. | 2021-10-20 19:30:00 | 2021-10-15 12:15:00 |
| CVE-2021-3057 | 9.3 | A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This issue impacts: Gl | 2021-10-20 19:27:00 | 2021-10-13 16:15:00 |
| CVE-2021-41139 | 4.3 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects a date in Time Tracker, it is being passed on via the date parameter in URI. Because of not checking this parameter for sanity in | 2021-10-20 19:17:00 | 2021-10-13 17:15:00 |
| CVE-2021-41132 | 4.3 | OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of sanitization and use of ``jQuery.html()``, there are a w | 2021-10-20 19:14:00 | 2021-10-14 16:15:00 |
| CVE-2021-37933 | 5.0 | An LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 could allow an unauthenticated, remote user to modify the logic of an LDAP query and bypass authentication. The vulnerability is due to insufficient server-side va | 2021-10-20 19:10:00 | 2021-10-14 16:15:00 |
| CVE-2021-42341 | 5.0 | checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption. CVE-2021-42341 was introduced in git commit 63db2d99e73054 | 2021-10-20 19:03:00 | 2021-10-14 05:15:00 |
| CVE-2021-42333 | 6.5 | The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions. | 2021-10-20 18:59:00 | 2021-10-15 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: