| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1662 | 5.5 | In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process li | 2022-07-20 13:21:00 | 2022-07-14 15:15:00 |
| CVE-2022-32225 | 6.1 | A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft System Center 8.0. This vulnerability could be exploited by an attacker by convincing a legitimate user to visit a crafted URL on | 2022-07-20 12:46:00 | 2022-07-14 15:15:00 |
| CVE-2022-31142 | 7.5 | @fastify/bearer-auth is a Fastify plugin to require bearer Authorization headers. @fastify/bearer-auth prior to versions 7.0.2 and 8.0.1 does not securely use crypto.timingSafeEqual. A malicious attacker could estimate the length of one valid bearer | 2022-07-20 12:45:00 | 2022-07-14 19:15:00 |
| CVE-2022-22998 | 5.0 | Implemented protections on AWS credentials that were not properly protected. | 2022-07-20 12:43:00 | 2022-07-12 21:15:00 |
| CVE-2017-20126 | 9.8 | A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. | 2022-07-20 12:13:00 | 2022-07-13 18:15:00 |
| CVE-2022-24800 | 6.8 | October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2.15, when the developer allows the user to specify their own filename in the `fromData` meth | 2022-07-20 11:40:00 | 2022-07-12 20:15:00 |
| CVE-2022-32389 | 7.5 | Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. This allows attackers to access sensitive information such as user credentials and certificates. | 2022-07-20 11:35:00 | 2022-07-14 21:15:00 |
| CVE-2022-2401 | 6.5 | Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs. | 2022-07-20 11:34:00 | 2022-07-14 18:15:00 |
| CVE-2017-20127 | 9.8 | A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The at | 2022-07-20 11:24:00 | 2022-07-13 18:15:00 |
| CVE-2022-25803 | 6.1 | Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search. | 2022-07-20 10:41:00 | 2022-07-14 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: