| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-31627 | 9.8 | In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption. | 2022-10-25 19:45:00 | 2022-07-28 06:15:00 |
| CVE-2021-1836 | 2.1 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, tvOS 14.5. A local user may be able to create or modify privileged files. | 2022-10-25 19:43:00 | 2021-09-08 15:15:00 |
| CVE-2021-32986 | 7.5 | After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent progra | 2022-10-25 19:40:00 | 2022-04-04 20:15:00 |
| CVE-2021-32942 | 2.1 | The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location. | 2022-10-25 19:38:00 | 2021-06-09 17:15:00 |
| CVE-2021-32933 | 7.5 | An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious | 2022-10-25 19:36:00 | 2022-04-01 23:15:00 |
| CVE-2021-31412 | 4.3 | Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1) | 2022-10-25 19:33:00 | 2021-06-24 12:15:00 |
| CVE-2021-3101 | 7.2 | Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container. | 2022-10-25 19:30:00 | 2022-04-19 23:15:00 |
| CVE-2021-31918 | 5.0 | A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality. | 2022-10-25 19:26:00 | 2021-05-06 17:15:00 |
| CVE-2021-24252 | 6.5 | The Event Banner WordPress plugin through 1.3 does not verify the uploaded image file, allowing admin accounts to upload arbitrary files, such as .exe, .php, or others executable, leading to RCE. Due to the lack of CSRF check, the issue can also be u | 2022-10-25 19:26:00 | 2021-05-06 13:15:00 |
| CVE-2021-3037 | 2.1 | An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, passw | 2022-10-25 19:17:00 | 2021-04-20 04:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: