Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 16.01.2025.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-13524 3.5 A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approac 2025-01-20 03:15:08
CVE-2025-0578 4.0 A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argume 2025-01-20 02:15:18
CVE-2025-0576 5.0 A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic. This issue affects some unknown processing of the file /control/player?center&eventlist&pda&dummy_for_reload=1736177631&p_evt. The manipulation of the argument p_qual le 2025-01-20 00:15:16
CVE-2025-0575 3.4 A vulnerability has been found in Union Bank of India Vyom 8.0.34 on Android and classified as problematic. This vulnerability affects unknown code of the component Rooting Detection. The manipulation leads to protection mechanism failure. The attack 2025-01-19 23:15:20
CVE-2025-0567 3.5 A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally 2025-01-19 08:15:06
CVE-2024-8722 5.5 The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.9.7 due to insufficient input sanitization and output escaping. This makes 2025-01-19 05:15:07
CVE-2025-0557 5.0 A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Edition up to 6.2.2. This affects an unknown part of the file /share/s/ of the component URL Handler. The manipulation leads to cros 2025-01-18 09:15:07
CVE-2024-13375 9.8 The Adifier System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.1.7. This is due to the plugin not properly validating a user's identity prior to updating their details like p 2025-01-18 09:15:07
CVE-2024-13184 7.5 The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and 2025-01-18 09:15:06
CVE-2024-13392 6.4 The Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_reviews' shortcode in all versions up to, and including, 1.6.3 due to insufficient input sa 2025-01-18 08:15:24
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12227
Zapisa po stranici: