| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-31164 | 5.0 | Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements. | 2022-10-25 19:14:00 | 2021-05-04 07:15:00 |
| CVE-2021-21544 | 4.0 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment | 2022-10-25 19:14:00 | 2021-04-30 21:15:00 |
| CVE-2021-29511 | 4.0 | evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes related to memory operations that use `evm_core::Memory::copy_large`, the `evm` crate can over-allocate memory when it is not neede | 2022-10-25 19:13:00 | 2021-05-12 18:15:00 |
| CVE-2022-2047 | 4.0 | In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead | 2022-10-25 19:10:00 | 2022-07-07 21:15:00 |
| CVE-2022-1131 | 8.8 | Use after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-10-25 19:07:00 | 2022-07-23 00:15:00 |
| CVE-2022-1130 | 8.1 | Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app. | 2022-10-25 19:07:00 | 2022-07-23 00:15:00 |
| CVE-2022-1129 | 6.5 | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. | 2022-10-25 19:07:00 | 2022-07-23 00:15:00 |
| CVE-2021-30169 | 5.0 | The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential. | 2022-10-25 19:07:00 | 2021-04-28 10:15:00 |
| CVE-2021-24635 | 5.5 | The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get an | 2022-10-25 19:01:00 | 2021-09-20 10:15:00 |
| CVE-2022-1135 | 8.8 | Use after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via standard feature user interaction. | 2022-10-25 18:52:00 | 2022-07-23 00:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: