| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-42044 | 3.5 | An issue was discovered in the Mentor dashboard in the GrowthExperiments extension in MediaWiki through 1.36.2. The Growthexperiments-mentor-dashboard-mentee-overview-add-filter-total-edits-headline, growthexperiments-mentor-dashboard-mentee-overview | 2021-10-14 20:09:00 | 2021-10-06 21:15:00 |
| CVE-2020-21648 | 6.4 | WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php. | 2021-10-14 20:00:00 | 2021-10-06 22:15:00 |
| CVE-2020-21649 | 5.5 | Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method. | 2021-10-14 19:56:00 | 2021-10-06 22:15:00 |
| CVE-2021-25467 | 7.2 | Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library. | 2021-10-14 19:27:00 | 2021-10-06 18:15:00 |
| CVE-2021-42041 | 4.3 | An issue was discovered in CentralAuth in MediaWiki through 1.36.2. The rightsnone MediaWiki message was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the setchange log. | 2021-10-14 18:55:00 | 2021-10-06 21:15:00 |
| CVE-2021-42040 | 5.0 | An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop (and php-fpm hang) within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion. | 2021-10-14 18:52:00 | 2021-10-06 21:15:00 |
| CVE-2021-29798 | 7.5 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back- | 2021-10-14 18:24:00 | 2021-10-06 17:15:00 |
| CVE-2021-29836 | 3.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0. through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading | 2021-10-14 18:20:00 | 2021-10-06 17:15:00 |
| CVE-2021-29837 | 6.8 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force | 2021-10-14 18:13:00 | 2021-10-06 17:15:00 |
| CVE-2021-29855 | 3.5 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading | 2021-10-14 18:03:00 | 2021-10-06 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: