| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-0660 | 4.0 | In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827145; Issue ID: ALPS | 2021-10-01 22:26:00 | 2021-09-27 12:15:00 |
| CVE-2021-36219 | 7.5 | An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contain | 2021-10-01 22:19:00 | 2021-09-27 14:15:00 |
| CVE-2021-40097 | 6.5 | An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter. | 2021-10-01 20:37:00 | 2021-09-27 12:15:00 |
| CVE-2021-40098 | 7.5 | An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression. | 2021-10-01 20:36:00 | 2021-09-27 12:15:00 |
| CVE-2021-24638 | 6.4 | The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file with Google Fonts CSS, or download fonts uploaded o | 2021-10-01 20:35:00 | 2021-09-20 10:15:00 |
| CVE-2021-40103 | 5.0 | An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF. | 2021-10-01 20:34:00 | 2021-09-27 12:15:00 |
| CVE-2021-40105 | 4.3 | An issue was discovered in Concrete CMS through 8.5.5. There is XSS via Markdown Comments. | 2021-10-01 20:30:00 | 2021-09-27 12:15:00 |
| CVE-2021-40349 | 5.0 | e7d Speed Test (aka speedtest) 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring. | 2021-10-01 20:30:00 | 2021-09-27 06:15:00 |
| CVE-2021-40106 | 4.3 | An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the website field. | 2021-10-01 20:29:00 | 2021-09-27 12:15:00 |
| CVE-2021-40981 | 4.4 | ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the publicly writable %PROGRAMDATA%\ASUS\GamingCenterLib directory. | 2021-10-01 20:08:00 | 2021-09-27 06:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: