| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1600 | 5.3 | The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations. | 2022-08-04 17:19:00 | 2022-08-01 13:15:00 |
| CVE-2022-34954 | 9.8 | Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php. | 2022-08-04 17:18:00 | 2022-08-02 03:15:00 |
| CVE-2022-34580 | 4.8 | Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the address parameter at ip/school/index.php. | 2022-08-04 17:15:00 | 2022-07-28 22:15:00 |
| CVE-2016-2139 | 6.4 | In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.class.php. | 2022-08-04 17:13:00 | 2022-07-28 15:15:00 |
| CVE-2016-2138 | 6.4 | In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.class.php. | 2022-08-04 17:12:00 | 2022-07-28 15:15:00 |
| CVE-2022-34556 | 5.5 | PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. | 2022-08-04 17:11:00 | 2022-07-28 23:15:00 |
| CVE-2021-33057 | 7.5 | The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext o | 2022-08-04 16:40:00 | 2022-07-26 23:15:00 |
| CVE-2021-40180 | 7.5 | In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts. | 2022-08-04 16:17:00 | 2022-07-26 23:15:00 |
| CVE-2022-29962 | 5.5 | The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: thi | 2022-08-04 15:56:00 | 2022-07-26 22:15:00 |
| CVE-2022-29963 | 5.5 | The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NO | 2022-08-04 15:55:00 | 2022-07-26 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: