| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-39887 | 3.5 | A stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE version 8.4 and above allowed an attacker to execute arbitrary JavaScript code on the victim's behalf. | 2021-10-08 19:02:00 | 2021-10-05 12:15:00 |
| CVE-2021-24654 | 3.5 | The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. This could allow any authenticated user, | 2021-10-08 18:39:00 | 2021-10-04 12:15:00 |
| CVE-2021-24465 | 5.5 | The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to an authenticated SQL Injection | 2021-10-08 18:39:00 | 2021-10-04 12:15:00 |
| CVE-2020-21012 | 7.5 | Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking D | 2021-10-08 18:20:00 | 2021-10-01 19:15:00 |
| CVE-2021-38104 | 4.3 | IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the | 2021-10-08 18:19:00 | 2021-10-01 19:15:00 |
| CVE-2021-38103 | 9.3 | IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the | 2021-10-08 18:18:00 | 2021-10-01 19:15:00 |
| CVE-2021-38099 | 9.3 | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context | 2021-10-08 18:17:00 | 2021-10-01 19:15:00 |
| CVE-2021-38096 | 9.3 | Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current us | 2021-10-08 18:17:00 | 2021-10-01 19:15:00 |
| CVE-2021-24676 | 4.3 | The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue | 2021-10-08 17:59:00 | 2021-10-04 12:15:00 |
| CVE-2021-24673 | 3.5 | The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 2021-10-08 17:44:00 | 2021-10-04 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: