| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-2793 | 7.8 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol. | 2022-08-24 16:12:00 | 2022-08-19 23:15:00 |
| CVE-2022-35173 | 7.5 | An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation. | 2022-08-24 16:02:00 | 2022-08-18 06:15:00 |
| CVE-2022-29805 | 9.8 | A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload. | 2022-08-24 15:58:00 | 2022-08-19 13:15:00 |
| CVE-2022-37133 | 7.5 | D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end. | 2022-08-24 15:57:00 | 2022-08-22 15:15:00 |
| CVE-2021-24910 | 6.1 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenticated and authenticated users when the curl library is installed) before outputting it back | 2022-08-24 15:52:00 | 2022-08-22 15:15:00 |
| CVE-2004-0589 | 4.3 | Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages. | 2022-08-24 15:40:00 | 2004-08-06 04:00:00 |
| CVE-2022-31237 | 3.3 | Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an improper preservation of permissions vulnerability in SyncIQ. A low privileged local attacker may potentially exploit this vulnerability, leading to limited inf | 2022-08-24 14:50:00 | 2022-08-22 17:15:00 |
| CVE-2022-32772 | 6.1 | A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated | 2022-08-24 14:49:00 | 2022-08-22 19:15:00 |
| CVE-2022-32771 | 6.1 | A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated | 2022-08-24 14:49:00 | 2022-08-22 19:15:00 |
| CVE-2022-32770 | 6.1 | A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated | 2022-08-24 14:49:00 | 2022-08-22 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: