| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-42006 | 6.8 | An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file. | 2021-10-12 18:46:00 | 2021-10-04 23:15:00 |
| CVE-2021-39882 | 5.0 | In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information about any GitLab user. | 2021-10-12 18:39:00 | 2021-10-05 13:15:00 |
| CVE-2021-38823 | 7.5 | The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session that is opened in a different browser. | 2021-10-12 18:37:00 | 2021-10-04 14:15:00 |
| CVE-2021-41867 | 5.0 | An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature. | 2021-10-12 18:34:00 | 2021-10-04 14:15:00 |
| CVE-2021-41868 | 7.5 | OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality. | 2021-10-12 18:28:00 | 2021-10-04 14:15:00 |
| CVE-2021-39872 | 4.0 | In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration. | 2021-10-12 18:24:00 | 2021-10-05 13:15:00 |
| CVE-2013-3630 | 4.6 | Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor. | 2021-10-12 18:15:00 | 2013-11-01 02:55:00 |
| CVE-2021-39894 | 5.5 | In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks. | 2021-10-12 17:49:00 | 2021-10-05 13:15:00 |
| CVE-2021-39878 | 3.5 | A stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.0 up to 14.3.1 allowed an attacker to execute arbitrary javascript code. | 2021-10-12 17:15:00 | 2021-10-05 13:15:00 |
| CVE-2021-39486 | 3.5 | A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser. | 2021-10-12 16:14:00 | 2021-10-04 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: