CVE-2021-23463 (h2)
The package com.h2database:h2 from 0 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed…
Devamını oku
Kategori: NIST-Güvenlik Açıkları
CVE-2020-19682
A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php. Devamını Oku
CVE-2020-19683
A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. Devamını Oku
CVE-2020-19682 (zzzcms)
A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php. Devamını Oku
CVE-2020-19683 (zzzcms)
A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. Devamını Oku
CVE-2021-20373
IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the…
CVE-2021-22568
When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token…
CVE-2021-20373 (db2)
IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the…
CVE-2021-22568 (dart_software_development_kit)
When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token…
CVE-2021-20143
An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on…