| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-29480 | 3.5 | Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption | 2022-08-02 16:00:00 | 2021-06-29 19:15:00 |
| CVE-2021-28563 | 6.4 | Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper Authorization vulnerability via the 'Create Customer' endpoint. Successful exploitation could lead to unauthorized modification of cus | 2022-08-02 15:59:00 | 2021-06-28 14:15:00 |
| CVE-2021-29507 | 4.0 | GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications wh | 2022-08-02 15:59:00 | 2021-05-28 21:15:00 |
| CVE-2021-28503 | 6.8 | The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI. | 2022-08-02 15:57:00 | 2022-02-04 23:15:00 |
| CVE-2022-36414 | 6.7 | There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard | 2022-08-02 15:53:00 | 2022-07-23 03:15:00 |
| CVE-2021-26608 | 7.5 | An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash. | 2022-08-02 15:52:00 | 2021-09-09 13:15:00 |
| CVE-2021-29487 | 5.8 | octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can exploit this vulnerability to bypass authentication and takeover of and user account on an October CMS server. The vul | 2022-08-02 15:49:00 | 2021-08-26 19:15:00 |
| CVE-2017-17820 | 4.3 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors. | 2022-08-02 15:41:00 | 2017-12-21 03:29:00 |
| CVE-2017-17819 | 4.3 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated. | 2022-08-02 15:41:00 | 2017-12-21 03:29:00 |
| CVE-2017-17817 | 4.3 | In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack. | 2022-08-02 15:41:00 | 2017-12-21 03:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: