| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-41297 | 4.0 | ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text. | 2021-10-07 16:22:00 | 2021-09-30 11:15:00 |
| CVE-2021-33923 | 2.1 | Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database). | 2021-10-07 15:42:00 | 2021-09-29 10:15:00 |
| CVE-2020-21386 | 6.8 | A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges. | 2021-10-07 15:40:00 | 2021-10-04 20:15:00 |
| CVE-2021-33924 | 7.5 | Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information. | 2021-10-07 15:36:00 | 2021-09-29 10:15:00 |
| CVE-2021-40651 | 4.0 | OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the application has access to the file. | 2021-10-07 15:33:00 | 2021-09-29 12:15:00 |
| CVE-2021-34414 | 6.5 | The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.20201217, Zoom on-premise Meeting Connector MMR before version 4.6.348.20201217, Zoom on-premise Recording Connector before version 3 | 2021-10-07 15:25:00 | 2021-09-27 14:15:00 |
| CVE-2020-21434 | 3.5 | Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field. | 2021-10-07 14:57:00 | 2021-10-04 21:15:00 |
| CVE-2020-21387 | 4.3 | A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. | 2021-10-07 14:57:00 | 2021-10-04 20:15:00 |
| CVE-2021-38098 | 6.8 | Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of | 2021-10-07 14:54:00 | 2021-10-01 23:15:00 |
| CVE-2021-38100 | 6.8 | Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current | 2021-10-07 14:53:00 | 2021-10-01 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: