| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-33453 | 7.8 | An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538. | 2022-08-02 13:33:00 | 2022-07-26 13:15:00 |
| CVE-2022-31471 | 7.5 | untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of | 2022-08-01 18:56:00 | 2022-07-26 06:15:00 |
| CVE-2022-22999 | 4.8 | Western Digital My Cloud devices are vulnerable to a cross side scripting vulnerability that can allow a malicious user with elevated privileges access to drives being backed up to construct and inject JavaScript payloads into an authenticated user's | 2022-08-01 18:53:00 | 2022-07-25 19:15:00 |
| CVE-2022-2131 | 9.8 | OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack. | 2022-08-01 18:36:00 | 2022-07-25 15:15:00 |
| CVE-2022-24083 | 9.8 | Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks. | 2022-08-01 18:28:00 | 2022-07-25 17:15:00 |
| CVE-2021-23397 | 9.8 | All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead. | 2022-08-01 17:50:00 | 2022-07-25 14:15:00 |
| CVE-2021-23373 | 9.8 | All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality. | 2022-08-01 17:44:00 | 2022-07-25 14:15:00 |
| CVE-2020-7678 | 9.8 | This affects all versions of package node-import. The "params" argument of module function can be controlled by users without any sanitization.b. This is then provided to the “eval” function located in line 79 in the index file "index.js". | 2022-08-01 17:38:00 | 2022-07-25 14:15:00 |
| CVE-2022-34866 | 7.8 | Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with Lo | 2022-08-01 17:18:00 | 2022-07-20 07:15:00 |
| CVE-2004-2466 | 5.0 | chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected. | 2022-08-01 17:15:00 | 2004-12-31 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: