| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-21865 | 7.5 | ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha. | 2021-10-14 15:24:00 | 2021-10-07 21:15:00 |
| CVE-2021-33849 | 3.5 | A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser is connected to a trusted website. The attack targets your application's users and not the application itself while using your appl | 2021-10-14 15:19:00 | 2021-10-05 22:15:00 |
| CVE-2020-15941 | 5.5 | A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of | 2021-10-14 14:57:00 | 2021-10-06 10:15:00 |
| CVE-2021-42094 | 7.5 | An issue was discovered in Zammad before 4.1.1. Command Injection can occur via custom Packages. | 2021-10-14 14:44:00 | 2021-10-07 20:15:00 |
| CVE-2021-24019 | 7.5 | An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtai | 2021-10-14 14:39:00 | 2021-10-06 10:15:00 |
| CVE-2021-36178 | 4.0 | A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup. | 2021-10-14 14:38:00 | 2021-10-06 10:15:00 |
| CVE-2021-24021 | 3.5 | An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column | 2021-10-14 14:37:00 | 2021-10-06 10:15:00 |
| CVE-2021-42093 | 6.5 | An issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a crafted request that manipulates triggers. | 2021-10-14 14:36:00 | 2021-10-07 20:15:00 |
| CVE-2021-42092 | 3.5 | An issue was discovered in Zammad before 4.1.1. Stored XSS may occur via an Article during addition of an attachment to a Ticket. | 2021-10-14 14:30:00 | 2021-10-07 20:15:00 |
| CVE-2021-33602 | 5.0 | A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression method), and this can crash the scanning engine. The vulnerability can be exploited remotely by an attacker. A suc | 2021-10-14 14:18:00 | 2021-10-06 10:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: