| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-42054 | 5.0 | ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication. | 2021-10-15 15:37:00 | 2021-10-07 06:15:00 |
| CVE-2021-32172 | 7.5 | Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin. | 2021-10-15 15:31:00 | 2021-10-07 11:15:00 |
| CVE-2021-41567 | 4.3 | The new add subject parameter of Tad Uploader view book list function fails to filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks. | 2021-10-15 15:20:00 | 2021-10-08 16:15:00 |
| CVE-2021-41565 | 4.3 | TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks. | 2021-10-15 15:20:00 | 2021-10-08 16:15:00 |
| CVE-2021-41566 | 7.5 | The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in. | 2021-10-15 15:19:00 | 2021-10-08 16:15:00 |
| CVE-2020-21653 | 6.4 | Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method. | 2021-10-15 15:18:00 | 2021-10-06 22:15:00 |
| CVE-2021-37919 | 7.5 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 2021-10-15 15:00:00 | 2021-10-07 16:15:00 |
| CVE-2021-37918 | 7.5 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 2021-10-15 15:00:00 | 2021-10-07 16:15:00 |
| CVE-2021-37762 | 7.5 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution. | 2021-10-15 14:56:00 | 2021-10-07 16:15:00 |
| CVE-2021-41920 | 5.0 | webTareas version 2.4 and earlier allows an unauthenticated user to perform Time and Boolean-based blind SQL Injection on the endpoint /includes/library.php, via the sor_cible, sor_champs, and sor_ordre HTTP POST parameters. This allows an attacker t | 2021-10-15 14:53:00 | 2021-10-08 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: