| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-28149 | 6.8 | myDBR 5.8.3/4262 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The component is: CSRF Token. The attack vector is: CSRF token injection to XSS. | 2021-03-24 15:03:00 | 2021-03-15 18:15:00 |
| CVE-2020-4635 | 5.0 | IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames. | 2021-03-24 15:02:00 | 2021-03-19 16:15:00 |
| CVE-2021-24147 | 3.5 | Unvalidated input and lack of output encoding in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not sanitise the mic_comment field (Notes on time) when adding/editing an event, allowing users with privilege as low as au | 2021-03-24 14:06:00 | 2021-03-18 15:15:00 |
| CVE-2021-21383 | 3.5 | Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue durin | 2021-03-24 14:00:00 | 2021-03-18 17:15:00 |
| CVE-2020-5261 | 4.9 | Saml2 Authentication services for ASP.NET (NuGet package Sustainsys.Saml2) greater than 2.0.0, and less than version 2.5.0 has a faulty implementation of Token Replay Detection. Token Replay Detection is an important defence in depth measure for Sing | 2021-03-24 13:15:00 | 2020-03-25 02:15:00 |
| CVE-2021-26935 | 5.0 | In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the event_id parameter. | 2021-03-24 12:43:00 | 2021-03-18 15:15:00 |
| CVE-2021-24138 | 5.5 | Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user. | 2021-03-24 12:27:00 | 2021-03-18 15:15:00 |
| CVE-2021-3034 | 3.6 | An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during | 2021-03-24 01:56:00 | 2021-03-10 18:15:00 |
| CVE-2021-26236 | 6.8 | FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception H | 2021-03-24 01:19:00 | 2021-03-18 13:15:00 |
| CVE-2021-27946 | 6.5 | SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3). | 2021-03-23 22:14:00 | 2021-03-15 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: