| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1648 | 7.2 | Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a .php file outside the intended images directory which is restricted to execute the .php file. The impact could lead to a Remote C | 2022-08-02 18:47:00 | 2022-07-26 15:15:00 |
| CVE-2022-1041 | 8.8 | In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. | 2022-08-02 18:44:00 | 2022-07-26 05:15:00 |
| CVE-2022-36161 | 9.8 | Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter. | 2022-08-02 18:43:00 | 2022-07-26 13:15:00 |
| CVE-2022-33967 | 7.8 | squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a deni | 2022-08-02 16:44:00 | 2022-07-20 07:15:00 |
| CVE-2022-34906 | 7.5 | A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests. | 2022-08-02 16:36:00 | 2022-07-25 21:15:00 |
| CVE-2013-4090 | 5.0 | Varnish HTTP cache before 3.0.4: ACL bug | 2022-08-02 16:29:00 | 2020-02-12 16:15:00 |
| CVE-2017-8807 | 6.4 | vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer is larger than intended in cer | 2022-08-02 16:29:00 | 2017-11-16 02:29:00 |
| CVE-2015-8852 | 5.0 | Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction | 2022-08-02 16:29:00 | 2016-04-25 14:59:00 |
| CVE-2013-4484 | 5.0 | Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI. | 2022-08-02 16:29:00 | 2013-11-01 02:55:00 |
| CVE-2021-29433 | 4.0 | Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resou | 2022-08-02 16:01:00 | 2021-04-15 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: