| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-25811 | 7.2 | The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection | 2022-08-25 02:41:00 | 2022-08-22 15:15:00 |
| CVE-2022-1932 | 6.1 | The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or dire | 2022-08-25 02:40:00 | 2022-08-22 15:15:00 |
| CVE-2021-3764 | 5.5 | A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system | 2022-08-25 02:33:00 | 2022-08-23 16:15:00 |
| CVE-2021-3736 | 5.5 | A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information. | 2022-08-25 02:28:00 | 2022-08-23 16:15:00 |
| CVE-2022-37223 | 9.8 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list. | 2022-08-25 01:04:00 | 2022-08-23 14:15:00 |
| CVE-2022-37199 | 9.8 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list. | 2022-08-25 01:03:00 | 2022-08-23 13:15:00 |
| CVE-2022-30690 | 6.1 | A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user | 2022-08-25 00:51:00 | 2022-08-22 19:15:00 |
| CVE-2021-24912 | 5.4 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to make authorised users add a translation. Given the lack of sanitisation in the tk0 parameter, | 2022-08-25 00:29:00 | 2022-08-22 15:15:00 |
| CVE-2021-24911 | 5.4 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The | 2022-08-25 00:21:00 | 2022-08-22 15:15:00 |
| CVE-2022-36009 | 8.8 | gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the `"events_default"` key of the `m.roo | 2022-08-24 23:55:00 | 2022-08-19 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: