| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-6457 | 6.8 | Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. | 2022-10-05 20:40:00 | 2020-05-21 04:15:00 |
| CVE-2019-12973 | 4.3 | In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616. | 2022-10-05 20:37:00 | 2019-06-26 18:15:00 |
| CVE-2021-43462 | 3.5 | A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter. | 2022-10-05 20:24:00 | 2022-04-04 16:15:00 |
| CVE-2021-43456 | 4.6 | An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the RumbleService executable service path. | 2022-10-05 20:23:00 | 2022-04-04 15:15:00 |
| CVE-2020-6462 | 6.8 | Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | 2022-10-05 20:12:00 | 2020-05-21 04:15:00 |
| CVE-2022-33887 | 7.8 | A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current proces | 2022-10-05 19:12:00 | 2022-10-03 15:15:00 |
| CVE-2022-33885 | 7.8 | A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution. | 2022-10-05 19:12:00 | 2022-10-03 15:15:00 |
| CVE-2020-24349 | 2.1 | njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface. | 2022-10-05 18:38:00 | 2020-08-13 19:15:00 |
| CVE-2020-12112 | 5.0 | BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion. | 2022-10-05 18:38:00 | 2020-04-23 18:15:00 |
| CVE-2020-11946 | 5.0 | Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. | 2022-10-05 18:37:00 | 2020-04-20 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40236
Zapisa po stranici: