| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-3251 | 4.0 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with | 2022-08-04 19:34:00 | 2018-10-17 01:31:00 |
| CVE-2018-3156 | 4.0 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with | 2022-08-04 19:33:00 | 2018-10-17 01:31:00 |
| CVE-2018-3143 | 4.0 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with | 2022-08-04 19:31:00 | 2018-10-17 01:31:00 |
| CVE-2021-23424 | 5.0 | This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time. | 2022-08-04 19:26:00 | 2021-08-18 17:15:00 |
| CVE-2022-35643 | 9.1 | IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service. IBM X-Force ID: 230956. | 2022-08-04 19:18:00 | 2022-07-29 14:15:00 |
| CVE-2022-36234 | 7.5 | SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets. | 2022-08-04 19:05:00 | 2022-07-28 23:15:00 |
| CVE-2021-24836 | 4.0 | The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them | 2022-08-04 18:53:00 | 2021-12-13 11:15:00 |
| CVE-2022-1950 | 9.8 | The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection | 2022-08-04 18:48:00 | 2022-08-01 13:15:00 |
| CVE-2022-1906 | 6.1 | The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a spec | 2022-08-04 18:47:00 | 2022-08-01 13:15:00 |
| CVE-2022-1585 | 7.5 | The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php. | 2022-08-04 18:47:00 | 2022-08-01 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: