| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-2640 | 6.8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged at | 2022-07-18 17:43:00 | 2018-01-18 02:29:00 |
| CVE-2018-2622 | 6.8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker | 2022-07-18 17:42:00 | 2018-01-18 02:29:00 |
| CVE-2016-3492 | 6.8 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer. | 2022-07-18 17:42:00 | 2016-10-25 14:29:00 |
| CVE-2021-43702 | 3.5 | ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stor | 2022-07-18 15:27:00 | 2022-07-05 12:15:00 |
| CVE-2022-32058 | 7.8 | An infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 allows attackers to cause a Denial of Service (DoS) via a crafted packet. | 2022-07-18 14:54:00 | 2022-07-07 19:15:00 |
| CVE-2022-2302 | 9.3 | Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password. | 2022-07-18 14:18:00 | 2022-07-11 11:15:00 |
| CVE-2020-4150 | 7.5 | IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force I | 2022-07-18 13:58:00 | 2022-07-11 17:15:00 |
| CVE-2022-31138 | 9.0 | mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutnot, regextra | 2022-07-18 13:53:00 | 2022-07-11 14:15:00 |
| CVE-2022-2222 | 4.0 | The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an harden | 2022-07-18 13:51:00 | 2022-07-17 11:15:00 |
| CVE-2022-26655 | 5.0 | Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams. | 2022-07-18 13:39:00 | 2022-07-17 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: