| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-33116 | 3.5 | An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and below allows attackers to read arbitrary files via a directory traversal. | 2022-07-07 12:46:00 | 2022-06-27 21:15:00 |
| CVE-2022-34750 | 5.0 | An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thousand characters. Unfortunately, this length is not validated, allowing much larger lexemes to be created, which introduces various | 2022-07-07 12:39:00 | 2022-06-28 13:15:00 |
| CVE-2017-20108 | 3.5 | A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "><script>alert(1)</script> leads to basic cross site | 2022-07-07 12:23:00 | 2022-06-29 07:15:00 |
| CVE-2022-2221 | 4.0 | Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to | 2022-07-07 02:47:00 | 2022-06-27 19:15:00 |
| CVE-2017-20102 | 2.1 | A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. | 2022-07-07 02:20:00 | 2022-06-27 14:15:00 |
| CVE-2017-20101 | 3.5 | A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to | 2022-07-07 02:03:00 | 2022-06-27 14:15:00 |
| CVE-2017-20099 | 7.5 | A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely. | 2022-07-06 20:40:00 | 2022-06-27 19:15:00 |
| CVE-2017-20098 | 3.5 | A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely. | 2022-07-06 20:40:00 | 2022-06-27 19:15:00 |
| CVE-2022-2140 | 6.0 | Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters. | 2022-07-06 20:30:00 | 2022-06-27 17:15:00 |
| CVE-2022-33005 | 4.3 | A cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field. | 2022-07-06 19:58:00 | 2022-06-27 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: