| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35833 | 3.5 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26 | 2021-01-04 18:34:00 | 2020-12-30 00:15:00 |
| CVE-2020-35832 | 3.5 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26 | 2021-01-04 18:26:00 | 2020-12-30 00:15:00 |
| CVE-2020-35829 | 3.5 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, | 2021-01-04 18:20:00 | 2020-12-30 00:15:00 |
| CVE-2019-15485 | 4.3 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. | 2021-01-04 18:20:00 | 2019-08-23 13:15:00 |
| CVE-2019-15484 | 4.3 | Bolt before 3.6.10 has XSS via an image's alt or title field. | 2021-01-04 18:20:00 | 2019-08-23 13:15:00 |
| CVE-2019-15483 | 4.3 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. | 2021-01-04 18:20:00 | 2019-08-23 13:15:00 |
| CVE-2019-9185 | 6.5 | Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension. | 2021-01-04 18:20:00 | 2019-03-07 23:29:00 |
| CVE-2017-16754 | 5.0 | Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php. | 2021-01-04 18:20:00 | 2017-11-10 02:29:00 |
| CVE-2015-7309 | 6.5 | The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it. | 2021-01-04 18:20:00 | 2015-09-22 15:59:00 |
| CVE-2018-13300 | 5.8 | In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading | 2021-01-04 18:15:00 | 2018-07-05 17:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: