| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-22148 | 6.5 | Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines. | 2021-10-18 12:14:00 | 2021-09-15 12:15:00 |
| CVE-2021-3035 | 6.5 | An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are no | 2021-10-18 12:14:00 | 2021-04-20 04:15:00 |
| CVE-2021-24400 | 6.5 | The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. | 2021-10-18 12:13:00 | 2021-09-20 10:15:00 |
| CVE-2021-20825 | 4.3 | Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors. | 2021-10-18 12:13:00 | 2021-09-17 02:15:00 |
| CVE-2021-40888 | 3.5 | Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A low privilege user can call this function through process.php file and execute scripting code. | 2021-10-18 12:12:00 | 2021-10-11 11:15:00 |
| CVE-2017-14121 | 4.3 | The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 re | 2021-10-18 12:11:00 | 2017-09-03 20:29:00 |
| CVE-2017-12678 | 6.8 | In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file. | 2021-10-18 12:11:00 | 2017-08-08 01:34:00 |
| CVE-2017-11189 | 4.3 | unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), which could be relevant if unrarlib is used as library code for a long-running application. NOTE: one of the se | 2021-10-18 12:11:00 | 2017-07-12 16:29:00 |
| CVE-2021-40887 | 10.0 | Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for files[] parameter, an attacker can add ../ to move all PHP files or any file on the system that has permissions to /upload/files/ | 2021-10-18 12:10:00 | 2021-10-11 11:15:00 |
| CVE-2020-3228 | 7.8 | A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of serv | 2021-10-18 12:08:00 | 2020-06-03 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: