|
196071
|
6.1 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! 3.0.0 through 3.9.26. HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2021-26032
|
2024-11-21 14:55 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196072
|
9.8 |
CRITICAL
Network
|
nconf-toml_project
|
nconf-toml
|
Prototype pollution vulnerability in `nconf-toml` versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2021-25946
|
2024-11-21 14:55 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196073
|
9.8 |
CRITICAL
Network
|
deep-defaults_project
|
deep-defaults
|
Prototype pollution vulnerability in 'deep-defaults' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2021-25944
|
2024-11-21 14:55 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196074
|
5.4 |
MEDIUM
Network
|
opennms
|
meridian horizon
|
In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0…
|
CWE-79
Cross-site Scripting
|
CVE-2021-25935
|
2024-11-21 14:55 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196075
|
5.4 |
MEDIUM
Network
|
opennms
|
meridian horizon
|
In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0…
|
CWE-79
Cross-site Scripting
|
CVE-2021-25934
|
2024-11-21 14:55 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196076
|
6.1 |
MEDIUM
Network
|
arangodb
|
arangodb
|
In ArangoDB, versions v2.2.6.2 through v3.7.10 are vulnerable to Cross-Site Scripting (XSS), since there is no validation of the .zip file name and filtering of potential abusive characters which zip…
|
CWE-79
Cross-site Scripting
|
CVE-2021-25938
|
2024-11-21 14:55 |
2021-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196077
|
4.8 |
MEDIUM
Network
|
opennms
|
meridian horizon
|
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1…
|
CWE-79
Cross-site Scripting
|
CVE-2021-25933
|
2024-11-21 14:55 |
2021-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196078
|
8.8 |
HIGH
Network
|
opennms
|
meridian horizon
|
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1…
|
CWE-352
Origin Validation Error
|
CVE-2021-25931
|
2024-11-21 14:55 |
2021-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196079
|
4.8 |
MEDIUM
Network
|
opennms
|
meridian horizon
|
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1…
|
CWE-79
Cross-site Scripting
|
CVE-2021-25929
|
2024-11-21 14:55 |
2021-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196080
|
4.3 |
MEDIUM
Network
|
opennms
|
meridian horizon
|
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1…
|
CWE-352
Origin Validation Error
|
CVE-2021-25930
|
2024-11-21 14:55 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|