| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22640 | 9.3 | A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with kernel privileges. | 2022-10-24 19:27:00 | 2022-03-18 18:15:00 |
| CVE-2022-39305 | 9.8 | Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate fileMd5 and fileName parameters, res | 2022-10-24 18:52:00 | 2022-10-24 14:15:00 |
| CVE-2021-31357 | 7.2 | A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the co | 2022-10-24 18:45:00 | 2021-10-19 19:15:00 |
| CVE-2021-31358 | 7.2 | A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the conte | 2022-10-24 18:44:00 | 2021-10-19 19:15:00 |
| CVE-2021-41146 | 6.8 | qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qute | 2022-10-24 18:43:00 | 2021-10-21 18:15:00 |
| CVE-2021-41163 | 7.5 | Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could lead to remote code execution. This resulted from a lack of validation in subscribe_url values. This issue is patched in the latest | 2022-10-24 18:43:00 | 2021-10-20 23:15:00 |
| CVE-2021-38475 | 9.0 | The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissions. | 2022-10-24 18:42:00 | 2021-10-22 12:15:00 |
| CVE-2021-21540 | 5.5 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to overwrite configuration information by injecting arbitrarily large payload. | 2022-10-24 18:21:00 | 2021-04-30 21:15:00 |
| CVE-2021-29474 | 5.0 | HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path | 2022-10-24 18:21:00 | 2021-04-26 22:15:00 |
| CVE-2021-22678 | 6.8 | Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current proces | 2022-10-24 17:23:00 | 2021-04-23 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: