| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-2240 | 7.5 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network acce | 2021-04-29 20:27:00 | 2021-04-22 22:15:00 |
| CVE-2021-29459 | 4.3 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible to persistently inject scripts in XWiki versions prior to 12.6.3 and 12.8. Unregistred users can fill simple text fields. Register | 2021-04-29 20:21:00 | 2021-04-20 19:15:00 |
| CVE-2020-7858 | 5.0 | There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to view host file on the system. T | 2021-04-29 20:16:00 | 2021-04-22 18:15:00 |
| CVE-2021-24232 | 3.5 | The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an authenticated reflected Cross-Site Scripting issue | 2021-04-29 18:49:00 | 2021-04-22 21:15:00 |
| CVE-2021-24233 | 4.3 | The Cooked Pro WordPress plugin before 1.7.5.6 was affected by unauthenticated reflected Cross-Site Scripting issues, due to improper sanitisation of user input while being output back in pages as an arbitrary attribute. | 2021-04-29 18:48:00 | 2021-04-22 21:15:00 |
| CVE-2021-24234 | 4.3 | The Search Forms page of the Ivory Search WordPress lugin before 4.6.1 did not properly sanitise the tab parameter before output it in the page, leading to a reflected Cross-Site Scripting issue when opening a malicious crafted link as a high privile | 2021-04-29 18:47:00 | 2021-04-22 21:15:00 |
| CVE-2019-17421 | 7.2 | Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload. | 2021-04-29 18:17:00 | 2019-11-21 15:15:00 |
| CVE-2020-7857 | 7.5 | A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: Tobesoft XPlatform versions prior to 9.2.2.280. | 2021-04-29 18:15:00 | 2021-04-20 20:15:00 |
| CVE-2020-27569 | 5.0 | Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system. | 2021-04-29 18:11:00 | 2021-04-21 22:15:00 |
| CVE-2021-29467 | 4.3 | Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a patch exists in version 2.4.1. | 2021-04-29 17:23:00 | 2021-04-22 00:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: