| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-4913 | 2.1 | IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288. | 2021-07-21 11:39:00 | 2021-01-04 14:15:00 |
| CVE-2020-4912 | 6.5 | IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privileged user. IBM X-Force ID: 191287. | 2021-07-21 11:39:00 | 2021-01-04 14:15:00 |
| CVE-2020-28464 | 10.0 | This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine. | 2021-07-21 11:39:00 | 2021-01-04 12:15:00 |
| CVE-2020-35962 | 5.0 | The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapping and thus allows price manipulation. | 2021-07-21 11:39:00 | 2021-01-03 07:15:00 |
| CVE-2020-35951 | 6.4 | An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordP | 2021-07-21 11:39:00 | 2021-01-01 04:15:00 |
| CVE-2020-35949 | 7.5 | An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution. If a quiz question could be answered by uploading | 2021-07-21 11:39:00 | 2021-01-01 04:15:00 |
| CVE-2020-35947 | 6.5 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowing these actions to be executed by anyone authenticated on the site. This happened because nonces were | 2021-07-21 11:39:00 | 2021-01-01 04:15:00 |
| CVE-2020-35944 | 6.8 | An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS. | 2021-07-21 11:39:00 | 2021-01-01 04:15:00 |
| CVE-2020-35938 | 6.0 | PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload in the | 2021-07-21 11:39:00 | 2021-01-01 02:15:00 |
| CVE-2019-25012 | 5.0 | The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy. | 2021-07-21 11:39:00 | 2021-01-01 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: