| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-39873 | 4.3 | In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visiting a malicious website by spoofing the content in an error response. | 2021-10-12 19:58:00 | 2021-10-04 17:15:00 |
| CVE-2021-39871 | 4.0 | In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call. | 2021-10-12 19:52:00 | 2021-10-04 17:15:00 |
| CVE-2021-39868 | 4.0 | In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited repository size by modifying values in a project export. | 2021-10-12 19:47:00 | 2021-10-04 17:15:00 |
| CVE-2021-41100 | 7.5 | Wire-server is the backing server for the open source wire secure messaging application. In affected versions it is possible to trigger email address change of a user with only the short-lived session token in the `Authorization` header. As the short | 2021-10-12 19:40:00 | 2021-10-04 19:15:00 |
| CVE-2021-37333 | 7.5 | Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser. | 2021-10-12 19:33:00 | 2021-10-04 14:15:00 |
| CVE-2021-41118 | 5.0 | The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser f | 2021-10-12 19:31:00 | 2021-10-04 19:15:00 |
| CVE-2021-37330 | 3.5 | Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile | 2021-10-12 19:30:00 | 2021-10-04 14:15:00 |
| CVE-2021-41651 | 5.0 | A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in process_update_profile | 2021-10-12 19:17:00 | 2021-10-04 19:15:00 |
| CVE-2021-39433 | 5.0 | A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the per | 2021-10-12 19:10:00 | 2021-10-04 20:15:00 |
| CVE-2021-39867 | 5.5 | In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery (SSRF) attacks. | 2021-10-12 19:08:00 | 2021-10-05 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: