| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-29093 | 3.6 | Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issu | 2022-06-17 16:29:00 | 2022-06-10 20:15:00 |
| CVE-2022-31788 | 7.5 | IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname. | 2022-06-17 16:29:00 | 2022-06-10 13:15:00 |
| CVE-2022-29254 | 5.8 | silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed | 2022-06-17 16:26:00 | 2022-06-09 07:15:00 |
| CVE-2022-29095 | 7.6 | Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vu | 2022-06-17 16:25:00 | 2022-06-10 20:15:00 |
| CVE-2022-29094 | 3.6 | Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion/overwrite vulnerability. Authenticated non-admin user could exploi | 2022-06-17 16:25:00 | 2022-06-10 20:15:00 |
| CVE-2022-27502 | 7.2 | RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM. | 2022-06-17 16:22:00 | 2022-06-10 13:15:00 |
| CVE-2021-44582 | 6.5 | A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL. | 2022-06-17 16:13:00 | 2022-06-10 13:15:00 |
| CVE-2022-25807 | 2.1 | An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-b | 2022-06-17 16:05:00 | 2022-06-09 04:15:00 |
| CVE-2022-25806 | 6.5 | An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the PrefDBCredentials class allows an attacker, who has discovered encrypted superuser credentials, to decrypt those credentials using a static 8-by | 2022-06-17 16:03:00 | 2022-06-09 04:15:00 |
| CVE-2022-25805 | 4.0 | An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials by the cmd_mgt_load_mgt_tree command allows an attacker (who can intercept or inspect traffic between an authenticated | 2022-06-17 16:02:00 | 2022-06-09 04:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: