Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2022-35976 9.8 The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary code execution on behalf of the user running VSCode. Users relying on kubeconfigs that are 2022-08-23 14:53:00
CVE-2022-0542 6.1 Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0. 2022-08-23 14:17:00
CVE-2022-36220 9.8 Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog. 2022-08-22 20:16:00
CVE-2022-36225 8.8 EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management function and add. 2022-08-22 19:54:00
CVE-2022-36577 8.8 An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin. 2022-08-22 19:53:00
CVE-2022-37254 5.4 DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configuration management. 2022-08-22 19:52:00
CVE-2022-36579 8.8 Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF). 2022-08-22 19:52:00
CVE-2020-27793 7.5 An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack. 2022-08-22 19:45:00
CVE-2022-35013 6.5 PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp. 2022-08-22 19:22:00
CVE-2022-35012 6.5 PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp. 2022-08-22 19:19:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/40249
Zapisa po stranici: