| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-25654 | 4.6 | An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versions of Avaya Aura Device Services. | 2022-08-01 12:20:00 | 2021-06-25 21:15:00 |
| CVE-2021-26253 | 6.8 | A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA | 2022-08-01 12:13:00 | 2022-05-06 17:15:00 |
| CVE-2021-25973 | 6.4 | In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only. | 2022-08-01 12:11:00 | 2021-11-02 07:15:00 |
| CVE-2022-35287 | 7.5 | IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IB | 2022-08-01 12:05:00 | 2022-07-25 18:23:00 |
| CVE-2021-25490 | 3.6 | A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process. | 2022-08-01 12:03:00 | 2021-10-06 18:15:00 |
| CVE-2021-25504 | 2.1 | Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information. | 2022-08-01 12:01:00 | 2021-11-05 03:15:00 |
| CVE-2021-25500 | 2.1 | A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise. | 2022-08-01 12:01:00 | 2021-11-05 03:15:00 |
| CVE-2021-25515 | 2.1 | An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID. | 2022-08-01 11:59:00 | 2021-12-08 15:15:00 |
| CVE-2020-28438 | 9.8 | This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js | 2022-08-01 11:56:00 | 2022-07-25 14:15:00 |
| CVE-2022-22555 | 6.7 | Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges | 2022-08-01 11:52:00 | 2022-07-21 04:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: