| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-28455 | 6.1 | This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped. | 2022-08-01 13:26:00 | 2022-07-25 14:15:00 |
| CVE-2020-28447 | 9.8 | This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath) | 2022-08-01 13:21:00 | 2022-07-25 14:15:00 |
| CVE-2022-34989 | 9.8 | Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_password_recover.php. | 2022-08-01 13:04:00 | 2022-07-26 13:15:00 |
| CVE-2022-31879 | 8.8 | Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter. | 2022-08-01 12:51:00 | 2022-07-26 13:15:00 |
| CVE-2022-22686 | 8.0 | Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecified vectors. | 2022-08-01 12:44:00 | 2022-07-26 02:15:00 |
| CVE-2021-25682 | 7.2 | It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel. | 2022-08-01 12:43:00 | 2021-06-11 03:15:00 |
| CVE-2021-26313 | 2.1 | Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage. | 2022-08-01 12:41:00 | 2021-06-09 12:15:00 |
| CVE-2020-28443 | 9.8 | This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js. | 2022-08-01 12:38:00 | 2022-07-25 14:15:00 |
| CVE-2020-28441 | 9.8 | This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context. | 2022-08-01 12:35:00 | 2022-07-25 14:15:00 |
| CVE-2021-25955 | 3.5 | In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the “Private Note” field at “/adherents/note.php?id=1” endpoint. The | 2022-08-01 12:27:00 | 2021-08-15 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: