| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-36956 | 7.5 | In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup certificate/private key from the same domain. The affects 9.0.x through 9.0.0.1 and 9.1.x through 9.1.0.1. | 2022-08-04 13:44:00 | 2022-07-27 21:15:00 |
| CVE-2022-34557 | 8.8 | Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/permit/permit.php. | 2022-08-04 13:13:00 | 2022-07-28 23:15:00 |
| CVE-2022-36378 | 4.8 | Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Floating Div plugin <= 3.0 at WordPress. | 2022-08-04 11:49:00 | 2022-07-29 19:15:00 |
| CVE-2016-4991 | 9.8 | Input passed to the Pdf() function is shell escaped and passed to child_process.exec() during PDF rendering. However, the shell escape does not properly encode all special characters, namely, semicolon and curly braces. This can be abused to achieve | 2022-08-04 11:49:00 | 2022-07-28 17:15:00 |
| CVE-2022-35632 | 4.8 | The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting (XSS). This issue was resolved in Velo | 2022-08-04 11:37:00 | 2022-07-29 17:15:00 |
| CVE-2022-35631 | 5.5 | On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2. | 2022-08-04 11:37:00 | 2022-07-29 17:15:00 |
| CVE-2022-36752 | 5.5 | png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file. | 2022-08-04 11:24:00 | 2022-07-28 23:15:00 |
| CVE-2022-35630 | 6.1 | A cross-site scripting (XSS) issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2. | 2022-08-04 10:16:00 | 2022-07-29 17:15:00 |
| CVE-2022-34578 | 7.2 | Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page. | 2022-08-04 03:13:00 | 2022-07-28 20:15:00 |
| CVE-2022-34593 | 7.5 | DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability. | 2022-08-04 03:06:00 | 2022-07-28 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: