Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2022-1967 4.3 The WP Championship WordPress plugin before 9.3 is lacking CSRF checks in various places, allowing attackers to make a logged in admin perform unwanted actions, such as create and delete arbitrary teams as well as update the plugin's settings. Due to 2022-07-12 18:32:00
CVE-2022-27803 4.0 Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space. 2022-07-12 18:22:00
CVE-2021-44975 4.3 radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser. 2022-07-12 17:42:00
CVE-2021-42659 6.1 There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, the httpd program will crash and 2022-07-12 17:42:00
CVE-2021-34111 10.0 Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php. 2022-07-12 17:42:00
CVE-2020-4970 4.3 IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerabi 2022-07-12 17:42:00
CVE-2021-38872 5.0 IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348. 2022-07-12 17:42:00
CVE-2020-4957 5.0 IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208. 2022-07-12 17:42:00
CVE-2021-42897 7.5 A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $_POST[r_name] is directly passed into the $mysqlstr and is executed by exec. 2022-07-12 17:42:00
CVE-2021-46785 5.0 The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier. 2022-07-12 17:42:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39953
Zapisa po stranici: