| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22217 | 6.5 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). The issue is caused by malformed | 2022-07-29 17:34:00 | 2022-07-20 15:15:00 |
| CVE-2022-22221 | 7.8 | An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX Series and EX Series allows a locally authenticated attacker with low privileges to take full control over the device. One aspect | 2022-07-29 17:30:00 | 2022-07-20 15:15:00 |
| CVE-2022-34964 | 4.8 | OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the SitePages module. | 2022-07-29 17:28:00 | 2022-07-25 15:15:00 |
| CVE-2022-1539 | 8.8 | The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyp | 2022-07-29 17:10:00 | 2022-07-25 13:15:00 |
| CVE-2022-0899 | 6.1 | The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting. | 2022-07-29 17:08:00 | 2022-07-25 13:15:00 |
| CVE-2019-5962 | 4.3 | Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2022-07-29 17:08:00 | 2019-07-05 14:15:00 |
| CVE-2019-5963 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. | 2022-07-29 17:07:00 | 2019-07-05 14:15:00 |
| CVE-2021-28171 | 7.5 | The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie. | 2022-07-29 17:06:00 | 2021-04-06 12:15:00 |
| CVE-2021-24207 | 4.0 | By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages. | 2022-07-29 17:05:00 | 2021-04-05 19:15:00 |
| CVE-2019-5972 | 4.3 | Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2022-07-29 17:05:00 | 2019-07-05 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: