| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-24687 | 3.5 | The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability i | 2021-10-08 15:38:00 | 2021-10-04 12:15:00 |
| CVE-2020-21013 | 6.5 | emlog v6.0.0 contains a SQL injection via /admin/comment.php. | 2021-10-08 15:34:00 | 2021-10-01 19:15:00 |
| CVE-2021-41647 | 6.4 | An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database infor | 2021-10-08 15:19:00 | 2021-10-01 15:15:00 |
| CVE-2021-21089 | 4.3 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to loca | 2021-10-08 15:18:00 | 2021-09-30 15:15:00 |
| CVE-2020-20691 | 5.8 | An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files. | 2021-10-08 14:58:00 | 2021-09-27 22:15:00 |
| CVE-2021-41096 | 5.0 | Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm (RSA/ECB/PKCS1Padding). The issue will be patched in | 2021-10-08 14:27:00 | 2021-09-27 20:15:00 |
| CVE-2021-22272 | 9.0 | The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful att | 2021-10-08 14:16:00 | 2021-09-27 14:15:00 |
| CVE-2021-39831 | 6.8 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this | 2021-10-08 14:06:00 | 2021-09-29 16:15:00 |
| CVE-2021-33601 | 6.5 | A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gateke | 2021-10-08 13:51:00 | 2021-09-28 10:15:00 |
| CVE-2021-33600 | 5.0 | A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated att | 2021-10-08 13:28:00 | 2021-09-28 10:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: