| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-32778 | 7.5 | An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie al | 2022-08-24 14:45:00 | 2022-08-22 19:15:00 |
| CVE-2022-32777 | 7.5 | An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie al | 2022-08-24 14:45:00 | 2022-08-22 19:15:00 |
| CVE-2022-33932 | 5.3 | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated network malicious attacker may potentially exploit this vulnerability, leadin | 2022-08-24 14:33:00 | 2022-08-22 17:15:00 |
| CVE-2022-32480 | 6.5 | Dell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an insecure default initialization of a resource vulnerability. A remote authenticated attacker may potentially exploit this vulnerability, l | 2022-08-24 14:33:00 | 2022-08-22 17:15:00 |
| CVE-2022-33148 | 8.8 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.T | 2022-08-24 14:32:00 | 2022-08-22 19:15:00 |
| CVE-2022-33147 | 8.8 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.T | 2022-08-24 14:30:00 | 2022-08-22 19:15:00 |
| CVE-2022-2829 | 5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 2022-08-24 14:26:00 | 2022-08-23 04:15:00 |
| CVE-2022-33149 | 8.8 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.T | 2022-08-24 14:24:00 | 2022-08-22 19:15:00 |
| CVE-2022-34652 | 8.8 | A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.T | 2022-08-24 14:03:00 | 2022-08-22 19:15:00 |
| CVE-2021-26639 | 7.5 | This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system. | 2022-08-24 13:48:00 | 2022-08-17 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: