Rezultati pretraživanja za 'Od datuma: 20.07.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-37084 | 8.8 | In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server | 2024-08-26 16:11:27 | 2024-07-25 10:15:07 |
| CVE-2024-7047 | 5.4 | A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior to 17.1.3, 17.2 prior to 17.2.1 allowing an attacker to execute arbitrary scripts under the context of the current logged in user | 2024-08-26 16:07:27 | 2024-07-25 01:15:09 |
| CVE-2024-36444 | 8.1 | cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs. | 2024-08-26 15:35:11 | 2024-08-22 15:15:16 |
| CVE-2024-7066 | 7.5 | A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/config_time_sync.php of the component HTTP POST Request Handler. The manipulation of t | 2024-08-26 15:34:56 | 2024-07-24 11:15:11 |
| CVE-2024-42992 | - | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. | 2024-08-26 15:15:08 | 2024-08-23 18:15:07 |
| CVE-2024-7980 | 7.8 | Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium) | 2024-08-26 15:14:10 | 2024-08-21 21:15:09 |
| CVE-2024-7979 | 7.8 | Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium) | 2024-08-26 15:13:19 | 2024-08-21 21:15:09 |
| CVE-2024-7972 | 8.8 | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) | 2024-08-26 15:11:35 | 2024-08-21 21:15:09 |
| CVE-2024-41046 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple tim | 2024-08-26 15:07:28 | 2024-07-29 15:15:12 |
| CVE-2024-42786 | 8.8 | A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of View User Profile Page. | 2024-08-26 14:58:17 | 2024-08-21 18:15:10 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13951
Zapisa po stranici: