| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-31146 | 8.8 | Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC h | 2022-07-27 22:42:00 | 2022-07-21 04:15:00 |
| CVE-2022-27580 | 7.8 | A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file wo | 2022-07-27 22:42:00 | 2022-07-19 16:15:00 |
| CVE-2022-27544 | 6.5 | BigFix Web Reports authorized users may see SMTP credentials in clear text. | 2022-07-27 22:40:00 | 2022-07-19 16:15:00 |
| CVE-2022-22445 | 6.5 | An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware. | 2022-07-27 22:40:00 | 2022-07-18 18:15:00 |
| CVE-2022-28877 | 6.7 | This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code e | 2022-07-27 22:39:00 | 2022-07-21 16:15:00 |
| CVE-2022-27545 | 5.4 | BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page. | 2022-07-27 22:36:00 | 2022-07-19 16:15:00 |
| CVE-2022-30628 | 5.5 | It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://X | 2022-07-27 22:35:00 | 2022-07-21 16:15:00 |
| CVE-2022-35912 | 9.8 | In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by gaining access to the class loa | 2022-07-27 22:18:00 | 2022-07-19 16:15:00 |
| CVE-2022-24659 | 7.5 | Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthenticated attackers to retrieve arbitrary files from the device. | 2022-07-27 22:04:00 | 2022-07-20 13:15:00 |
| CVE-2022-24657 | 9.8 | Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol (port 22). | 2022-07-27 22:04:00 | 2022-07-20 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: