Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2022-22237 6.5 An Improper Authentication vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause an impact on confidentiality or integrity. A vulnerability in the processing of TCP-AO will allow a BGP or 2022-10-20 14:58:00
CVE-2020-8975 7.5 ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access sensitive information about the system. 2022-10-20 14:52:00
CVE-2022-22229 8.4 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, a stored XSS (or persistent), in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance (Formerly Netrounds) allows a 2022-10-20 14:49:00
CVE-2022-42980 9.8 go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key. 2022-10-20 14:40:00
CVE-2022-2052 9.8 Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system. 2022-10-20 14:25:00
CVE-2022-39052 6.5 An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system 2022-10-20 14:20:00
CVE-2022-3501 7.5 Article template contents with sensitive data could be accessed from agents without permissions. 2022-10-20 14:16:00
CVE-2022-42975 7.5 socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token. 2022-10-20 14:12:00
CVE-2022-3566 7.1 A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix 2022-10-20 12:50:00
CVE-2022-3338 5.4 An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and 2022-10-20 12:44:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: