| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-21263 | 5.0 | Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a | 2022-10-19 13:16:00 | 2021-01-19 20:15:00 |
| CVE-2021-21248 | 6.5 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. InputSpec is used to define parameters of a Build spec. It does so by using dynamically generated Groo | 2022-10-19 13:15:00 | 2021-01-15 21:15:00 |
| CVE-2021-21244 | 7.5 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean validation message tampering. Full details in the reference GHSA. This issue was fixed in | 2022-10-19 13:11:00 | 2021-01-15 20:15:00 |
| CVE-2021-21235 | 4.3 | kamadak-exif is an exif parsing library written in pure Rust. In kamadak-exif version 0.5.2, there is an infinite loop in parsing crafted PNG files. Specifically, reader::read_from_container can cause an infinite loop when a crafted PNG file is given | 2022-10-19 13:00:00 | 2021-01-06 02:15:00 |
| CVE-2021-45809 | 10.0 | GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute commands as root by submitting the ` | 2022-10-19 12:53:00 | 2022-03-22 11:15:00 |
| CVE-2021-40416 | 6.5 | An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. All the Get APIs that are not included in cgi_check_ability are already executable by any logged-in use | 2022-10-19 12:27:00 | 2022-01-28 20:15:00 |
| CVE-2022-35698 | 5.4 | Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code | 2022-10-19 06:21:00 | 2022-10-14 20:15:00 |
| CVE-2022-35691 | 5.5 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servic | 2022-10-19 06:19:00 | 2022-10-14 20:15:00 |
| CVE-2022-35690 | 9.8 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does | 2022-10-19 06:16:00 | 2022-10-14 20:15:00 |
| CVE-2022-35689 | 5.3 | Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability o | 2022-10-19 06:16:00 | 2022-10-14 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: