| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-29078 | 7.5 | The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName]. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbi | 2023-08-08 14:22:00 | 2022-04-25 15:15:00 |
| CVE-2022-28871 | 5.0 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. Th | 2023-08-08 14:22:00 | 2022-04-25 11:15:00 |
| CVE-2021-45841 | 6.8 | In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517), an attacker can self-sign session cookies by knowing the target's MAC address and the user's password hash. Guest users (disabled by default) can be abused using a null/empty hash and allow | 2023-08-08 14:22:00 | 2022-04-25 11:15:00 |
| CVE-2021-38905 | 4.0 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697. | 2023-08-08 14:22:00 | 2022-04-22 17:15:00 |
| CVE-2021-38904 | 4.3 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. IBM X-Force ID: 209693. | 2023-08-08 14:22:00 | 2022-04-22 17:15:00 |
| CVE-2022-29566 | 6.8 | The Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation fails to include all of the public values from the Zero Knowledge proof statement as well as all of the public values computed in the proof, aka the Froze | 2023-08-08 14:22:00 | 2022-04-21 19:15:00 |
| CVE-2022-25342 | 5.5 | An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Broken Access Control. It does not properly validate requests for access to data and functionality under the /mngset/authset path. By not | 2023-08-08 14:22:00 | 2022-04-20 13:15:00 |
| CVE-2022-29527 | 6.9 | Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition. | 2023-08-08 14:22:00 | 2022-04-20 10:15:00 |
| CVE-2022-21475 | 4.6 | Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network | 2023-08-08 14:22:00 | 2022-04-19 21:15:00 |
| CVE-2021-43129 | 5.8 | A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on | 2023-08-08 14:22:00 | 2022-04-19 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: