| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-39417 | 5.5 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris | 2022-10-20 15:11:00 | 2022-10-18 21:15:00 |
| CVE-2022-21639 | 6.1 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search Integration). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with | 2022-10-20 15:11:00 | 2022-10-18 21:15:00 |
| CVE-2022-22243 | 4.3 | An XPath Injection vulnerability due to Improper Input Validation in the J-Web component of Juniper Networks Junos OS allows an authenticated attacker to add an XPath command to the XPath stream, which may allow chaining to other unspecified vulnerab | 2022-10-20 15:11:00 | 2022-10-18 03:15:00 |
| CVE-2022-39419 | 4.3 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle N | 2022-10-20 15:10:00 | 2022-10-18 21:15:00 |
| CVE-2022-22242 | 6.1 | A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the context of their session within J-Web. Th | 2022-10-20 15:09:00 | 2022-10-18 03:15:00 |
| CVE-2022-39058 | 7.5 | RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files. | 2022-10-20 15:08:00 | 2022-10-18 06:15:00 |
| CVE-2022-39056 | 9.8 | RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database. | 2022-10-20 15:08:00 | 2022-10-18 06:15:00 |
| CVE-2022-39055 | 5.3 | RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response. | 2022-10-20 15:07:00 | 2022-10-18 06:15:00 |
| CVE-2022-22241 | 9.8 | An Improper Input Validation vulnerability in the J-Web component of Juniper Networks Junos OS may allow an unauthenticated attacker to access data without proper authorization. Utilizing a crafted POST request, deserialization may occur which could | 2022-10-20 15:07:00 | 2022-10-18 03:15:00 |
| CVE-2022-22239 | 8.8 | An Execution with Unnecessary Privileges vulnerability in Management Daemon (mgd) of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially remote syste | 2022-10-20 15:04:00 | 2022-10-18 03:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: