| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-24714 | 4.3 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the IDO writer enabled are affected. If you use service custom variables in role restrictions, and you regularly decommissio | 2022-11-09 21:38:00 | 2022-03-08 20:15:00 |
| CVE-2021-24730 | 4.0 | The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, | 2022-11-09 21:38:00 | 2022-02-28 09:15:00 |
| CVE-2022-1391 | 7.5 | The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues. | 2022-11-09 21:29:00 | 2022-04-25 16:16:00 |
| CVE-2022-25169 | 4.3 | The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files. | 2022-11-09 21:26:00 | 2022-05-16 17:15:00 |
| CVE-2019-15691 | 6.5 | TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been a | 2022-11-09 21:25:00 | 2019-12-26 15:15:00 |
| CVE-2022-30543 | 8.8 | A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to execution of privileged operations. An attacker can send a sequence of re | 2022-11-09 20:59:00 | 2022-11-09 18:15:00 |
| CVE-2022-41978 | 6.5 | Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress. | 2022-11-09 19:26:00 | 2022-11-09 16:15:00 |
| CVE-2022-0351 | 4.6 | Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2. | 2022-11-09 19:20:00 | 2022-01-25 18:15:00 |
| CVE-2021-24555 | 6.5 | The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or escaping, leading to a SQL Injection issue. Furthe | 2022-11-09 19:19:00 | 2021-08-23 12:15:00 |
| CVE-2022-36077 | 6.1 | The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 21.0.0-beta.1, 20.0.1, 19.0.11, and 18.3.7, Electron is vulnerable to Exposure of Sensitive Information. When following a | 2022-11-09 19:16:00 | 2022-11-08 07:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: