| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-2842 | 9.8 | A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument user_email leads to sql injection. It is possible to initiate the atta | 2022-08-24 13:00:00 | 2022-08-22 19:15:00 |
| CVE-2022-29468 | 8.8 | A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request t | 2022-08-24 12:54:00 | 2022-08-22 19:15:00 |
| CVE-2022-28710 | 6.5 | An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this v | 2022-08-24 12:36:00 | 2022-08-22 19:15:00 |
| CVE-2022-37113 | 9.8 | Bluecms 1.6 has SQL injection in line 132 of admin/area.php | 2022-08-24 11:50:00 | 2022-08-23 16:15:00 |
| CVE-2022-37112 | 9.8 | BlueCMS 1.6 has SQL injection in line 55 of admin/model.php | 2022-08-24 11:50:00 | 2022-08-23 16:15:00 |
| CVE-2022-37111 | 9.8 | BlueCMS 1.6 has SQL injection in line 132 of admin/article.php | 2022-08-24 11:50:00 | 2022-08-23 16:15:00 |
| CVE-2022-26842 | 9.6 | A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get | 2022-08-23 19:52:00 | 2022-08-22 19:15:00 |
| CVE-2022-2789 | 5.5 | Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic. | 2022-08-23 19:47:00 | 2022-08-19 23:15:00 |
| CVE-2022-28757 | 7.8 | The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privi | 2022-08-23 19:45:00 | 2022-08-18 20:15:00 |
| CVE-2022-2594 | 8.8 | The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend fo | 2022-08-23 19:16:00 | 2022-08-22 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: