| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-9920 | 6.5 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user. | 2023-02-03 19:52:00 | 2019-03-29 15:29:00 |
| CVE-2022-1890 | 7.8 | A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. | 2023-02-03 19:50:00 | 2023-01-26 21:15:00 |
| CVE-2019-4292 | 6.5 | IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable web server. IBM X-Force ID: 160698. | 2023-02-03 19:50:00 | 2019-07-02 15:15:00 |
| CVE-2019-4303 | 3.5 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tr | 2023-02-03 19:50:00 | 2019-06-19 14:15:00 |
| CVE-2022-41142 | 8.8 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. | 2023-02-03 19:45:00 | 2023-01-26 18:59:00 |
| CVE-2022-41141 | 7.8 | This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif | 2023-02-03 19:44:00 | 2023-01-26 18:59:00 |
| CVE-2022-40717 | 8.8 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens o | 2023-02-03 19:44:00 | 2023-01-26 18:59:00 |
| CVE-2020-10934 | 6.5 | Acyba AcyMailing before 6.9.2 mishandles file uploads by admins. | 2023-02-03 19:44:00 | 2020-03-24 15:15:00 |
| CVE-2019-20627 | 7.5 | AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE. | 2023-02-03 19:42:00 | 2020-03-23 17:15:00 |
| CVE-2019-19034 | 6.5 | Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the Ass | 2023-02-03 19:38:00 | 2020-03-23 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: