| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-3832 | 7.5 | Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in order to exploit the vulnerability. | 2021-10-15 01:57:00 | 2021-10-07 14:15:00 |
| CVE-2021-28661 | 4.0 | Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass. | 2021-10-15 01:53:00 | 2021-10-07 15:15:00 |
| CVE-2021-41865 | 4.0 | HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode. Fixed in | 2021-10-15 01:47:00 | 2021-10-07 14:15:00 |
| CVE-2021-36150 | 4.3 | SilverStripe Framework through 4.8.1 allows XSS. | 2021-10-15 01:38:00 | 2021-10-07 14:15:00 |
| CVE-2021-41128 | 6.5 | Hygeia is an application for collecting and processing personal and case data in connection with communicable diseases. In affected versions all CSV Exports (Statistics & BAG MED) contain a CSV Injection Vulnerability. Users of the system are able to | 2021-10-14 23:00:00 | 2021-10-06 18:15:00 |
| CVE-2020-21729 | 3.5 | JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | 2021-10-14 20:38:00 | 2021-10-07 22:15:00 |
| CVE-2021-42053 | 3.5 | The Unicorn framework through 0.35.3 for Django allows XSS via component.name. | 2021-10-14 20:28:00 | 2021-10-07 06:15:00 |
| CVE-2020-21656 | 3.5 | XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index. | 2021-10-14 20:28:00 | 2021-10-06 22:15:00 |
| CVE-2021-42043 | 4.3 | An issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through 1.36.2. The suggestion text (a parameter to mediasearch-did-you-mean) was not being properly sanitized and allowed for the injection and execution of HTM | 2021-10-14 20:19:00 | 2021-10-06 21:15:00 |
| CVE-2021-42042 | 3.5 | An issue was discovered in SpecialEditGrowthConfig in the GrowthExperiments extension in MediaWiki through 1.36.2. The growthexperiments-edit-config-error-invalid-title MediaWiki message was not being properly sanitized and allowed for the injection | 2021-10-14 20:19:00 | 2021-10-06 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: