| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-30623 | 9.8 | The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and password. | 2022-07-23 02:08:00 | 2022-07-18 13:15:00 |
| CVE-2022-36126 | 7.2 | An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script. | 2022-07-22 22:30:00 | 2022-07-16 19:15:00 |
| CVE-2022-34754 | 6.8 | A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C (A9XELC10-A) (V1.7.5 and prior), Acti9 PowerTag Link C (A9XELC10-B) (V2.12.0 and | 2022-07-22 22:27:00 | 2022-07-13 21:15:00 |
| CVE-2020-23563 | 5.5 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba. | 2022-07-22 20:35:00 | 2022-07-18 00:15:00 |
| CVE-2022-1737 | 5.0 | Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in | 2022-07-22 17:14:00 | 2022-07-12 21:15:00 |
| CVE-2022-30243 | 8.8 | Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet | 2022-07-22 17:13:00 | 2022-07-15 12:15:00 |
| CVE-2022-30242 | 6.8 | Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can sen | 2022-07-22 17:11:00 | 2022-07-15 12:15:00 |
| CVE-2022-30244 | 8.0 | Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a c | 2022-07-22 17:05:00 | 2022-07-15 12:15:00 |
| CVE-2022-2420 | 8.0 | A vulnerability was found in URVE Web Manager. It has been rated as critical. This issue affects some unknown processing of the file _internal/uploader.php. The manipulation leads to unrestricted upload. The attack needs to be approached within the l | 2022-07-22 16:56:00 | 2022-07-15 06:15:00 |
| CVE-2022-2419 | 8.0 | A vulnerability was found in URVE Web Manager. It has been declared as critical. This vulnerability affects unknown code of the file _internal/collector/upload.php. The manipulation leads to unrestricted upload. Access to the local network is require | 2022-07-22 16:56:00 | 2022-07-15 06:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: