| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-36948 | 5.4 | In Veritas NetBackup OpsCenter, a DOM XSS attack can occur. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10. | 2022-08-04 00:09:00 | 2022-07-27 21:15:00 |
| CVE-2022-27615 | 8.1 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors. | 2022-08-03 23:19:00 | 2022-07-28 04:15:00 |
| CVE-2022-22685 | 8.1 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete arbitrary files via unspecified vectors. | 2022-08-03 20:39:00 | 2022-07-28 07:15:00 |
| CVE-2022-27613 | 8.8 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users to inject SQL commands via unspecified vectors. | 2022-08-03 20:16:00 | 2022-07-28 07:15:00 |
| CVE-2022-27611 | 8.1 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors. | 2022-08-03 19:58:00 | 2022-07-28 08:15:00 |
| CVE-2022-37009 | 7.8 | In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible | 2022-08-03 19:36:00 | 2022-07-28 11:15:00 |
| CVE-2022-36364 | 8.8 | Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver does not verify if the class implements the expected interface before instantiating it, whic | 2022-08-03 19:36:00 | 2022-07-28 09:15:00 |
| CVE-2022-37010 | 3.3 | In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed | 2022-08-03 19:29:00 | 2022-07-28 11:15:00 |
| CVE-2022-31169 | 7.5 | Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 a | 2022-08-03 18:33:00 | 2022-07-22 04:15:00 |
| CVE-2022-23000 | 7.8 | The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead | 2022-08-03 18:30:00 | 2022-07-25 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: