| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-36322 | 8.8 | In JetBrains TeamCity before 2022.04.2 build parameter injection was possible | 2022-07-27 21:49:00 | 2022-07-20 13:15:00 |
| CVE-2022-1264 | 8.8 | The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code. | 2022-07-27 21:48:00 | 2022-07-20 16:15:00 |
| CVE-2022-1766 | 7.5 | Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by an | 2022-07-27 21:47:00 | 2022-07-20 16:15:00 |
| CVE-2022-2107 | 9.8 | The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-coded master password. This may allow an attacker to send SMS commands directly to the GPS tracker as if they were coming from the GPS owner’s | 2022-07-27 21:46:00 | 2022-07-20 16:15:00 |
| CVE-2022-2179 | 6.5 | The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks. | 2022-07-27 21:45:00 | 2022-07-20 16:15:00 |
| CVE-2022-33944 | 6.5 | The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,” which accepts arbitrary device IDs. | 2022-07-27 21:42:00 | 2022-07-20 16:15:00 |
| CVE-2022-2199 | 6.1 | The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain control by tricking a user into making a request. | 2022-07-27 21:42:00 | 2022-07-20 16:15:00 |
| CVE-2022-34150 | 5.4 | The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on endpoint and parameter device IDs, which accept arbitrary device IDs without further verification. | 2022-07-27 21:33:00 | 2022-07-20 16:15:00 |
| CVE-2022-34042 | 7.2 | Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php. | 2022-07-27 21:14:00 | 2022-07-20 17:15:00 |
| CVE-2022-34045 | 9.8 | Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh. | 2022-07-27 21:13:00 | 2022-07-20 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: