| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-21277 | 6.5 | angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compile(userCon | 2022-10-19 19:06:00 | 2021-02-01 15:15:00 |
| CVE-2021-21264 | 4.4 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 (fixed in 1.0.470/471 and 1.1.1) was discovered that has the same impact as CVE-2020-26231 & CVE-2020-15247. An authenticated back | 2022-10-19 19:04:00 | 2021-05-03 16:15:00 |
| CVE-2019-15961 | 7.1 | A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to | 2022-10-19 18:54:00 | 2020-01-15 19:15:00 |
| CVE-2020-26247 | 4.0 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schemas parsed by Nokogiri::XML::Schema are trusted by default, allowing | 2022-10-19 18:53:00 | 2020-12-30 19:15:00 |
| CVE-2021-39880 | 4.0 | A Denial Of Service vulnerability in the apollo_upload_server Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker | 2022-10-19 18:25:00 | 2021-10-05 15:15:00 |
| CVE-2017-2601 | 3.5 | Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and description | 2022-10-19 18:15:00 | 2018-05-10 13:29:00 |
| CVE-2022-3421 | 7.3 | An attacker can pre-create the `/Applications/Google\ Drive.app/Contents/MacOS` directory which is expected to be owned by root to be owned by a non-root user. When the Drive for Desktop installer is run for the first time, it will place a binary in | 2022-10-19 18:10:00 | 2022-10-17 20:15:00 |
| CVE-2022-29298 | 5.0 | SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal. | 2022-10-19 17:55:00 | 2022-05-12 16:15:00 |
| CVE-2022-1631 | 6.8 | Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the V | 2022-10-19 17:48:00 | 2022-05-09 14:15:00 |
| CVE-2022-1116 | 7.2 | Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions. | 2022-10-19 17:46:00 | 2022-05-17 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: