| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-38822 | 3.5 | A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaScript commands. | 2021-10-08 17:39:00 | 2021-10-04 14:15:00 |
| CVE-2021-23856 | 4.3 | The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL. | 2021-10-08 17:37:00 | 2021-10-04 18:15:00 |
| CVE-2021-36850 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions <= 5.1.9). Affected parameters "post_title", "filename", "lock". This allows changing the uploaded media title, media file name, a | 2021-10-08 17:31:00 | 2021-10-04 17:15:00 |
| CVE-2021-35296 | 7.5 | An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path. | 2021-10-08 17:28:00 | 2021-10-04 17:15:00 |
| CVE-2021-41861 | 2.1 | The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than CVE-2019-16248. After approximately two to four uses of the self-destruct feature, there is a misleading UI in | 2021-10-08 17:28:00 | 2021-10-04 03:15:00 |
| CVE-2021-22259 | 4.0 | A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API. | 2021-10-08 17:03:00 | 2021-10-04 17:15:00 |
| CVE-2020-28119 | 4.3 | Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into chat window. | 2021-10-08 17:01:00 | 2021-10-04 17:15:00 |
| CVE-2021-3710 | 4.7 | An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions pr | 2021-10-08 16:51:00 | 2021-10-01 03:15:00 |
| CVE-2021-41110 | 7.5 | cwlviewer is a web application to view and share Common Workflow Language workflows. Versions prior to 1.3.1 contain a Deserialization of Untrusted Data vulnerability. Commit number f6066f09edb70033a2ce80200e9fa9e70a5c29de (dated 2021-09-30) contains | 2021-10-08 16:21:00 | 2021-10-01 13:15:00 |
| CVE-2021-38097 | 9.3 | Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitati | 2021-10-08 15:57:00 | 2021-10-01 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: