| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24287 | 4.3 | The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue | 2021-10-18 11:51:00 | 2021-05-14 12:15:00 |
| CVE-2021-40886 | 4.0 | Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value `2` for `chunks` parameter to bypass `fileName` sanitization. | 2021-10-16 00:56:00 | 2021-10-11 11:15:00 |
| CVE-2021-27665 | 5.0 | An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition. | 2021-10-16 00:42:00 | 2021-10-11 16:15:00 |
| CVE-2021-20489 | 6.8 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 197790. | 2021-10-16 00:29:00 | 2021-10-07 18:15:00 |
| CVE-2021-20481 | 4.3 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc | 2021-10-16 00:24:00 | 2021-10-07 18:15:00 |
| CVE-2021-20473 | 4.0 | IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944. | 2021-10-16 00:19:00 | 2021-10-07 18:15:00 |
| CVE-2021-40541 | 4.3 | PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag without "//" in descript() function An authenticated user can trigger XSS by appending "//" in the end of text. | 2021-10-15 20:32:00 | 2021-10-11 14:15:00 |
| CVE-2021-35059 | 4.3 | OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter. | 2021-10-15 20:30:00 | 2021-10-11 09:15:00 |
| CVE-2021-33603 | 4.3 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A successfu | 2021-10-15 18:50:00 | 2021-10-08 10:15:00 |
| CVE-2021-40832 | 4.3 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A | 2021-10-15 18:42:00 | 2021-10-08 10:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: