Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2017-3453 4.0 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privi 2022-08-01 15:14:00
CVE-2018-2782 4.0 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access vi 2022-08-01 15:11:00
CVE-2018-2784 4.0 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access vi 2022-08-01 15:00:00
CVE-2020-7649 4.9 This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal. 2022-08-01 14:09:00
CVE-2020-28471 9.8 This affects the package properties-reader before 2.2.0. 2022-08-01 14:04:00
CVE-2022-32958 6.5 A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate other recipients’ Teamplus Pro chat process. 2022-08-01 13:52:00
CVE-2021-33451 5.5 An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c. 2022-08-01 13:46:00
CVE-2020-28462 9.8 This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context. 2022-08-01 13:37:00
CVE-2020-28461 9.8 This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context. 2022-08-01 13:32:00
CVE-2020-28459 6.1 This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link. 2022-08-01 13:30:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: