| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-3937 | 4.8 | Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser | 2023-08-18 14:30:00 | 2023-08-11 12:15:00 |
| CVE-2023-3864 | 7.2 | Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal. | 2023-08-18 14:16:00 | 2023-08-11 12:15:00 |
| CVE-2023-27558 | 7.8 | IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting | 2023-08-18 14:15:00 | 2023-07-10 16:15:00 |
| CVE-2023-25577 | 7.5 | Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to | 2023-08-18 14:15:00 | 2023-02-14 20:15:00 |
| CVE-2023-23934 | 3.5 | Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a | 2023-08-18 14:15:00 | 2023-02-14 20:15:00 |
| CVE-2021-23463 | 6.4 | The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML() method. If | 2023-08-18 14:15:00 | 2021-12-10 20:15:00 |
| CVE-2019-10103 | 6.8 | JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, | 2023-08-18 14:15:00 | 2019-07-03 20:15:00 |
| CVE-2019-10102 | 6.8 | JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3. | 2023-08-18 14:15:00 | 2019-07-03 20:15:00 |
| CVE-2019-10101 | 6.8 | JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. | 2023-08-18 14:15:00 | 2019-07-03 20:15:00 |
| CVE-2021-28411 | 9.8 | An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges. | 2023-08-18 13:21:00 | 2023-08-11 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: