| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22968 | 5.0 | In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and | 2022-10-19 15:15:00 | 2022-04-14 21:15:00 |
| CVE-2022-42237 | 9.8 | A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account. | 2022-10-19 15:05:00 | 2022-10-17 14:15:00 |
| CVE-2020-25695 | 6.5 | A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions un | 2022-10-19 15:01:00 | 2020-11-16 01:15:00 |
| CVE-2020-25694 | 6.8 | A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while drop | 2022-10-19 15:00:00 | 2020-11-16 01:15:00 |
| CVE-2019-20933 | 7.5 | InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret). | 2022-10-19 14:52:00 | 2020-11-19 02:15:00 |
| CVE-2020-29370 | 4.4 | An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71. | 2022-10-19 14:49:00 | 2020-11-28 07:15:00 |
| CVE-2020-7032 | 5.5 | An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM i | 2022-10-19 14:39:00 | 2020-11-13 01:15:00 |
| CVE-2022-39278 | 7.5 | Istio is an open platform-independent service mesh that provides traffic management, policy enforcement, and telemetry collection. Prior to versions 1.15.2, 1.14.5, and 1.13.9, the Istio control plane, istiod, is vulnerable to a request processing er | 2022-10-19 14:24:00 | 2022-10-13 23:15:00 |
| CVE-2022-39229 | 4.3 | Grafana is an open source data visualization platform for metrics, logs, and traces. Versions prior to 9.1.8 and 8.5.14 allow one user to block another user's login attempt by registering someone else'e email address as a username. A Grafana user’s u | 2022-10-19 14:10:00 | 2022-10-13 23:15:00 |
| CVE-2022-39201 | 7.5 | Grafana is an open source observability and data visualization platform. Starting with version 5.0.0-beta1 and prior to versions 8.5.14 and 9.1.8, Grafana could leak the authentication cookie of users to plugins. The vulnerability impacts data source | 2022-10-19 14:08:00 | 2022-10-13 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: