| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-29022 | 7.5 | A buffer overflow vulnerability exists in the razeraccessory driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service (DoS) and possibly escalate their privileges via a crafted buffer sent to the matrix_custom_frame devi | 2022-10-27 21:07:00 | 2022-05-20 13:15:00 |
| CVE-2022-29023 | 7.5 | A buffer overflow vulnerability exists in the razermouse driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service (DoS) and possibly escalate their privileges via a crafted buffer sent to the matrix_custom_frame device. | 2022-10-27 20:58:00 | 2022-05-20 13:15:00 |
| CVE-2022-1095 | 3.5 | The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabilit | 2022-10-27 20:41:00 | 2022-06-27 09:15:00 |
| CVE-2022-2497 | 6.4 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. A malicious developer could exfiltrate an integration' | 2022-10-27 20:39:00 | 2022-08-05 16:15:00 |
| CVE-2022-35882 | 4.8 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in GS Plugins GS Testimonial Slider plugin <= 1.9.5 at WordPress. | 2022-10-27 20:28:00 | 2022-07-28 15:15:00 |
| CVE-2022-38171 | 7.8 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This i | 2022-10-27 20:27:00 | 2022-08-22 19:15:00 |
| CVE-2022-30770 | 4.3 | Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their c | 2022-10-27 20:23:00 | 2022-05-16 03:15:00 |
| CVE-2021-25002 | 5.0 | The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via | 2022-10-27 20:19:00 | 2022-05-02 16:15:00 |
| CVE-2021-25118 | 5.0 | The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation | 2022-10-27 20:14:00 | 2022-02-28 09:15:00 |
| CVE-2022-38342 | 6.5 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks. | 2022-10-27 19:58:00 | 2022-09-13 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: