| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-21431 | 5.5 | HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit. | 2021-10-13 12:22:00 | 2021-10-04 21:15:00 |
| CVE-2021-39347 | 4.0 | The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site | 2021-10-12 22:32:00 | 2021-10-04 18:15:00 |
| CVE-2021-41530 | 4.3 | Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured. | 2021-10-12 22:07:00 | 2021-10-04 17:15:00 |
| CVE-2021-40683 | 4.4 | In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution. | 2021-10-12 22:05:00 | 2021-10-04 17:15:00 |
| CVE-2021-41578 | 6.8 | mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicious mep file, then they gain the ability to write arbitrary files to OS locations where the | 2021-10-12 21:41:00 | 2021-10-04 18:15:00 |
| CVE-2021-41579 | 6.8 | LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicious els project file and use the play feature, then the attacker can bypass a consent popup and write arbitrary | 2021-10-12 21:33:00 | 2021-10-04 18:15:00 |
| CVE-2021-40324 | 5.0 | Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. | 2021-10-12 20:58:00 | 2021-10-04 06:15:00 |
| CVE-2021-40323 | 7.5 | Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection. | 2021-10-12 20:25:00 | 2021-10-04 06:15:00 |
| CVE-2021-41596 | 5.0 | SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality. | 2021-10-12 20:13:00 | 2021-10-04 17:15:00 |
| CVE-2021-41595 | 5.0 | SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionality. | 2021-10-12 20:11:00 | 2021-10-04 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: