| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-36157 | 8.8 | XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account. | 2022-08-23 18:39:00 | 2022-08-19 22:15:00 |
| CVE-2021-3513 | 7.5 | A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is t | 2022-08-23 18:35:00 | 2022-08-22 15:15:00 |
| CVE-2022-2593 | 7.2 | The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks | 2022-08-23 18:34:00 | 2022-08-22 15:15:00 |
| CVE-2021-37289 | 7.2 | Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etc_ro/web/syscmd.asp. | 2022-08-23 18:33:00 | 2022-08-22 15:15:00 |
| CVE-2022-36346 | 8.8 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress. | 2022-08-23 18:23:00 | 2022-08-22 15:15:00 |
| CVE-2022-36606 | 9.8 | Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database. | 2022-08-23 18:23:00 | 2022-08-19 15:15:00 |
| CVE-2021-36857 | 5.4 | Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress. | 2022-08-23 18:21:00 | 2022-08-22 15:15:00 |
| CVE-2021-36852 | 8.0 | Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress. | 2022-08-23 18:20:00 | 2022-08-22 15:15:00 |
| CVE-2022-36170 | 8.8 | MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion. | 2022-08-23 18:19:00 | 2022-08-19 21:15:00 |
| CVE-2022-2890 | 5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 2022-08-23 18:13:00 | 2022-08-22 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: