tenable tenable.sc güvenlik açıkları (CVE)

tenable tenable.sc için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
6.5Orta
CVE-2021-41184

XSS in the `of` option of the `.position()` util

jquery jquery-ui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

41%EPSS
9.0Kritik
CVE-2021-40438 KEV Fidye yazılımında kullanılıyor

mod_proxy SSRF

Apache Software Foundation Apache HTTP Server

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

100%EPSS
8.7Yüksek
CVE-2019-11043 KEV Fidye yazılımında kullanılıyor

Underflow in PHP-FPM can lead to RCE

PHP PHP

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…

100%EPSS