| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-36968 | 4.3 | In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks. | 2022-08-09 18:58:00 | 2022-08-02 22:15:00 |
| CVE-2022-31184 | 7.5 | Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta and tests-passed versions of Discourse which rate limits em | 2022-08-09 18:48:00 | 2022-08-01 20:15:00 |
| CVE-2022-31185 | 5.3 | mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, even if a user had clicked the `Hide Email Address` checkbox on their account page, or during signup. This could lead to an account's | 2022-08-09 18:41:00 | 2022-08-01 20:15:00 |
| CVE-2022-31186 | 3.3 | NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in `next-auth` before `v4.10.2` and `v3.29.9` allows an attacker with log access privilege to obtain excessive information | 2022-08-09 18:37:00 | 2022-08-01 20:15:00 |
| CVE-2022-27551 | 6.5 | HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. | 2022-08-09 18:25:00 | 2022-08-03 20:15:00 |
| CVE-2022-34927 | 7.8 | MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file. | 2022-08-09 18:23:00 | 2022-08-03 01:15:00 |
| CVE-2022-34992 | 7.8 | Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending. | 2022-08-09 18:22:00 | 2022-08-03 18:15:00 |
| CVE-2022-31175 | 4.7 | CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages in versions prior to 35.0.1. The vulnerability allowed to trigger a JavaScript code after fulfilling | 2022-08-09 17:28:00 | 2022-08-03 19:15:00 |
| CVE-2022-34967 | 7.5 | The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13. | 2022-08-09 17:22:00 | 2022-08-03 02:15:00 |
| CVE-2022-34968 | 7.5 | An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL query. | 2022-08-09 17:19:00 | 2022-08-03 02:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: