| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-25972 | 7.8 | An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | 2022-08-23 17:11:00 | 2022-08-22 19:15:00 |
| CVE-2022-25942 | 7.8 | An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | 2022-08-23 17:11:00 | 2022-08-22 19:15:00 |
| CVE-2022-36605 | 9.8 | Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter. | 2022-08-23 17:03:00 | 2022-08-19 15:15:00 |
| CVE-2022-26061 | 7.8 | A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | 2022-08-23 16:50:00 | 2022-08-22 19:15:00 |
| CVE-2022-35656 | 4.5 | Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly. | 2022-08-23 16:45:00 | 2022-08-22 15:15:00 |
| CVE-2022-35654 | 6.1 | Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter. | 2022-08-23 16:44:00 | 2022-08-22 15:15:00 |
| CVE-2022-35655 | 6.1 | Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a datapage setting. | 2022-08-23 16:22:00 | 2022-08-22 15:15:00 |
| CVE-2022-2885 | 4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 2022-08-23 16:10:00 | 2022-08-21 08:15:00 |
| CVE-2022-2921 | 8.8 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality | 2022-08-23 16:09:00 | 2022-08-21 04:15:00 |
| CVE-2022-36344 | 9.8 | An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquot | 2022-08-23 16:02:00 | 2022-08-16 08:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: