| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-22949 | 5.8 | A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Research Team" | 2021-10-19 16:47:00 | 2021-09-23 13:15:00 |
| CVE-2021-22953 | 5.8 | A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security Research Team" | 2021-10-19 16:39:00 | 2021-09-23 13:15:00 |
| CVE-2021-34814 | 5.0 | Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass. | 2021-10-19 16:28:00 | 2021-10-13 15:15:00 |
| CVE-2021-39304 | 5.0 | Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass. | 2021-10-19 15:22:00 | 2021-10-13 15:15:00 |
| CVE-2020-3546 | 5.0 | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due t | 2021-10-19 14:51:00 | 2020-09-04 03:15:00 |
| CVE-2020-1714 | 6.5 | A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privi | 2021-10-19 14:15:00 | 2020-05-13 19:15:00 |
| CVE-2021-41055 | 5.0 | Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (XEP-0308) message in multi-user chat, where the message ID equals the correction ID. | 2021-10-19 14:09:00 | 2021-10-11 03:15:00 |
| CVE-2021-20833 | 5.8 | The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate. | 2021-10-19 14:04:00 | 2021-10-13 09:15:00 |
| CVE-2021-38458 | 7.5 | A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries. | 2021-10-19 13:45:00 | 2021-10-12 14:15:00 |
| CVE-2021-20831 | 6.8 | Cross-site request forgery (CSRF) vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack the authentication of administrators and unintended operation may be performed via unspecified vectors. | 2021-10-19 13:38:00 | 2021-10-13 09:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: