| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-23769 | 9.8 | Remote code execution vulnerability due to insufficient user privilege verification in reverseWall-MDS. Remote attackers can exploit the vulnerability such as stealing account, through remote code execution. | 2022-10-19 13:57:00 | 2022-10-17 16:15:00 |
| CVE-2022-23770 | 9.8 | This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal. | 2022-10-19 13:56:00 | 2022-10-17 16:15:00 |
| CVE-2022-23771 | 8.8 | This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to o | 2022-10-19 13:52:00 | 2022-10-17 16:15:00 |
| CVE-2020-26237 | 4.9 | Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's | 2022-10-19 13:49:00 | 2020-11-24 23:15:00 |
| CVE-2022-30126 | 4.3 | In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the Standards | 2022-10-19 13:39:00 | 2022-05-16 17:15:00 |
| CVE-2019-6171 | 7.2 | A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware. | 2022-10-19 13:31:00 | 2019-08-19 15:15:00 |
| CVE-2020-8744 | 4.6 | Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable | 2022-10-19 13:29:00 | 2020-11-12 18:15:00 |
| CVE-2020-6294 | 6.4 | Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user identity. | 2022-10-19 13:25:00 | 2020-08-12 14:15:00 |
| CVE-2021-21309 | 6.5 | Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Re | 2022-10-19 13:21:00 | 2021-02-26 22:15:00 |
| CVE-2021-26945 | 4.3 | An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. | 2022-10-19 13:19:00 | 2021-06-08 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: