| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-40699 | 6.1 | Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions. | 2023-11-07 03:52:00 | 2023-03-16 09:15:00 |
| CVE-2022-41333 | 7.5 | An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests. | 2023-11-07 03:52:00 | 2023-03-07 17:15:00 |
| CVE-2022-41329 | 5.3 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated at | 2023-11-07 03:52:00 | 2023-03-07 17:15:00 |
| CVE-2022-40676 | 5.4 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, | 2023-11-07 03:52:00 | 2023-03-07 17:15:00 |
| CVE-2022-40198 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in StandaloneTech TeraWallet – For WooCommerce plugin <= 1.3.24 leading to plugin settings change. | 2023-11-07 03:52:00 | 2023-03-01 14:15:00 |
| CVE-2022-40148 | - | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none. | 2023-11-07 03:52:00 | 2023-03-01 08:15:00 |
| CVE-2022-41727 | 5.5 | An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service. | 2023-11-07 03:52:00 | 2023-02-28 18:15:00 |
| CVE-2022-41722 | 7.5 | A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b" into the valid path "c:\b". This transformation of a relative (if invalid) path into an ab | 2023-11-07 03:52:00 | 2023-02-28 18:15:00 |
| CVE-2022-40237 | 7.5 | IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727. | 2023-11-07 03:52:00 | 2023-02-27 15:15:00 |
| CVE-2022-40231 | 8.8 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 235533. | 2023-11-07 03:52:00 | 2023-02-17 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: