Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2023-26091 6.1 The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails. 2023-03-07 19:02:00
CVE-2023-26042 6.1 Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline a 2023-03-07 17:30:00
CVE-2023-23080 9.8 Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V220 2023-03-07 16:55:00
CVE-2023-24206 9.8 Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function. 2023-03-07 16:54:00
CVE-2023-26036 9.8 ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via /web/ 2023-03-07 16:53:00
CVE-2023-26037 9.8 ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not p 2023-03-07 16:52:00
CVE-2023-26038 6.5 ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via web/a 2023-03-07 16:47:00
CVE-2023-26039 8.8 ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controlle 2023-03-07 16:43:00
CVE-2023-1070 7.1 External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22. 2023-03-07 15:13:00
CVE-2021-3329 6.5 Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack 2023-03-07 14:47:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39855
Zapisa po stranici: