Advisories · Technology

ledgersmb/ledgersmb.

Every CVE that names ledgersmb/ledgersmb among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-3882 CVE record

CVSS 5.9 Medium

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb
- ledgersmb/ledgersmb
- CWE-614
Not analysed yet 14 Oct 2021
CVE-2021-3731 CVE record

CVSS 5.9 Medium

Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb
- ledgersmb/ledgersmb
- CWE-1021
Not analysed yet 23 Aug 2021
CVE-2021-3694 CVE record

CVSS 8.2 High

Cross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmb
- ledgersmb/ledgersmb
- Cross-site scripting (XSS)
Not analysed yet 23 Aug 2021
CVE-2021-3693 CVE record

CVSS 8.8 High

Cross-site Scripting (XSS) - DOM in ledgersmb/ledgersmb
- ledgersmb/ledgersmb
- Cross-site scripting (XSS)
Not analysed yet 23 Aug 2021