| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24709 | 3.5 | The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues | 2021-10-15 16:26:00 | 2021-10-11 11:15:00 |
| CVE-2021-24711 | 6.8 | The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack | 2021-10-15 16:25:00 | 2021-10-11 11:15:00 |
| CVE-2021-24681 | 3.5 | The Duplicate Page WordPress plugin through 4.4.2 does not sanitise or escape the Duplicate Post Suffix settings before outputting it, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html | 2021-10-15 16:23:00 | 2021-10-11 11:15:00 |
| CVE-2021-24577 | 3.5 | The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS. | 2021-10-15 16:23:00 | 2021-10-11 11:15:00 |
| CVE-2021-24720 | 3.5 | The GeoDirectory Business Directory WordPress plugin before 2.1.1.3 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS). | 2021-10-15 16:22:00 | 2021-10-11 11:15:00 |
| CVE-2020-22617 | 7.5 | Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext. | 2021-10-15 16:17:00 | 2021-10-08 20:15:00 |
| CVE-2021-29906 | 1.9 | IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, 1.3, 1.4 and 1.5 could disclose sensitive information to a local user when it is configured to use an IBM Cloud API key to connect to cloud-based connectors. IBM X-Force ID: 207630. | 2021-10-15 16:16:00 | 2021-10-08 18:15:00 |
| CVE-2021-42071 | 10.0 | In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharacters in the cgi-bin/slogin/login.py User-Agent HTTP header. | 2021-10-15 16:11:00 | 2021-10-07 17:15:00 |
| CVE-2020-21726 | 7.5 | OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter. | 2021-10-15 15:46:00 | 2021-10-07 22:15:00 |
| CVE-2020-21725 | 7.5 | OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter. | 2021-10-15 15:42:00 | 2021-10-07 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: