| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-36170 | 2.1 | An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in clearte | 2021-10-14 14:10:00 | 2021-10-06 10:15:00 |
| CVE-2021-42084 | 4.0 | An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of service. | 2021-10-14 14:01:00 | 2021-10-07 21:15:00 |
| CVE-2021-41124 | 4.3 | Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use [`HttpAuthMiddleware`](http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#module-scrapy.downloadermiddlewares.httpauth) (i. | 2021-10-14 13:50:00 | 2021-10-05 21:15:00 |
| CVE-2021-42091 | 6.4 | An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration. | 2021-10-14 13:46:00 | 2021-10-07 21:15:00 |
| CVE-2021-3510 | 5.0 | Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/adviso | 2021-10-14 13:23:00 | 2021-10-05 21:15:00 |
| CVE-2021-42090 | 7.5 | An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserialization is mishandled. | 2021-10-14 13:17:00 | 2021-10-07 21:15:00 |
| CVE-2020-21505 | 4.3 | waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave. | 2021-10-14 12:51:00 | 2021-10-05 22:15:00 |
| CVE-2021-42089 | 5.0 | An issue was discovered in Zammad before 4.1.1. The REST API discloses sensitive information. | 2021-10-14 12:48:00 | 2021-10-07 21:15:00 |
| CVE-2020-21506 | 4.3 | waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add. | 2021-10-14 12:48:00 | 2021-10-05 22:15:00 |
| CVE-2020-21503 | 5.0 | waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free. | 2021-10-14 12:38:00 | 2021-10-05 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: