| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22961 | 5.0 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exp | 2023-08-08 14:22:00 | 2022-04-13 18:15:00 |
| CVE-2022-22955 | 7.5 | VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in t | 2023-08-08 14:22:00 | 2022-04-13 18:15:00 |
| CVE-2022-23702 | 4.6 | A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is res | 2023-08-08 14:22:00 | 2022-04-12 17:15:00 |
| CVE-2022-22254 | 5.0 | A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confidentiality. | 2023-08-08 14:22:00 | 2022-04-11 20:15:00 |
| CVE-2022-20079 | 2.1 | In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742 | 2023-08-08 14:22:00 | 2022-04-11 20:15:00 |
| CVE-2022-27128 | 7.5 | An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts. | 2023-08-08 14:22:00 | 2022-04-10 21:15:00 |
| CVE-2022-27819 | 4.0 | SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such as a block or character device). | 2023-08-08 14:22:00 | 2022-04-07 02:15:00 |
| CVE-2022-26591 | 5.0 | FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request. | 2023-08-08 14:22:00 | 2022-04-06 20:15:00 |
| CVE-2022-26850 | 4.0 | When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global r | 2023-08-08 14:22:00 | 2022-04-06 18:15:00 |
| CVE-2022-26912 | 5.1 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2023-08-08 14:22:00 | 2022-04-05 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39839
Zapisa po stranici: