| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22685 | 8.1 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete arbitrary files via unspecified vectors. | 2022-08-03 20:39:00 | 2022-07-28 07:15:00 |
| CVE-2022-27613 | 8.8 | Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users to inject SQL commands via unspecified vectors. | 2022-08-03 20:16:00 | 2022-07-28 07:15:00 |
| CVE-2022-27611 | 8.1 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors. | 2022-08-03 19:58:00 | 2022-07-28 08:15:00 |
| CVE-2022-37009 | 7.8 | In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible | 2022-08-03 19:36:00 | 2022-07-28 11:15:00 |
| CVE-2022-36364 | 8.8 | Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver does not verify if the class implements the expected interface before instantiating it, whic | 2022-08-03 19:36:00 | 2022-07-28 09:15:00 |
| CVE-2022-37010 | 3.3 | In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed | 2022-08-03 19:29:00 | 2022-07-28 11:15:00 |
| CVE-2022-31169 | 7.5 | Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 a | 2022-08-03 18:33:00 | 2022-07-22 04:15:00 |
| CVE-2022-23000 | 7.8 | The Western Digital My Cloud Web App [https://os5.mycloud.com/] uses a weak SSLContext when attempting to configure port forwarding rules. This was enabled to maintain compatibility with old or outdated home routers. By using an "SSL" context instead | 2022-08-03 18:30:00 | 2022-07-25 19:15:00 |
| CVE-2022-34551 | 6.5 | Sims v1.0 was discovered to allow path traversal when downloading attachments. | 2022-08-03 17:00:00 | 2022-07-27 14:15:00 |
| CVE-2022-35869 | 9.8 | This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within com.ind | 2022-08-03 16:56:00 | 2022-07-25 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: