| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-33897 | 9.1 | A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vu | 2022-10-26 03:24:00 | 2022-10-25 17:15:00 |
| CVE-2017-20144 | 7.8 | A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. | 2022-10-26 02:57:00 | 2022-07-24 20:15:00 |
| CVE-2022-2469 | 8.1 | GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client | 2022-10-26 02:54:00 | 2022-07-19 16:15:00 |
| CVE-2022-36450 | 9.8 | Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checking the URL. | 2022-10-26 02:53:00 | 2022-07-25 07:15:00 |
| CVE-2022-35223 | 9.8 | EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote | 2022-10-26 02:52:00 | 2022-08-02 16:15:00 |
| CVE-2022-35216 | 7.5 | OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files. | 2022-10-26 02:50:00 | 2022-08-04 10:15:00 |
| CVE-2022-32965 | 9.8 | OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service. | 2022-10-26 02:49:00 | 2022-08-04 10:15:00 |
| CVE-2022-32964 | 9.8 | OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service. | 2022-10-26 02:48:00 | 2022-08-04 10:15:00 |
| CVE-2022-32963 | 7.5 | OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files. | 2022-10-26 02:46:00 | 2022-08-04 10:15:00 |
| CVE-2021-0975 | 5.5 | In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no additional executio | 2022-10-26 02:43:00 | 2022-08-11 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: