CVE-2021-36913
Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin
İçeriği inceleyinDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI […]
İçeriği inceleyinDell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI […]
İçeriği inceleyinReflected Cross-Site Scripting (XSS) vulnerability FontMeister plugin
İçeriği inceleyinOpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 […]
İçeriği inceleyinIn Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover. Zafiyet ile ilgili […]
İçeriği inceleyinIn AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can […]
İçeriği inceleyinP2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. […]
İçeriği inceleyinArm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest’s P2M (Physical-to-Machine) mapping. When large […]
İçeriği inceleyinlock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling […]
İçeriği inceleyinXAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor […]
İçeriği inceleyinA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). Affected devices do not properly validate the structure […]
İçeriği inceleyin