Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2022-34042 7.2 Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php. 2022-07-27 21:14:00
CVE-2022-34045 9.8 Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh. 2022-07-27 21:13:00
CVE-2022-34048 6.1 Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter. 2022-07-27 21:12:00
CVE-2022-2493 8.1 Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0. 2022-07-27 19:36:00
CVE-2022-2511 6.1 Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL. 2022-07-27 19:33:00
CVE-2022-21802 6.1 The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager. 2022-07-27 19:30:00
CVE-2022-2523 6.1 Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.2. 2022-07-27 19:29:00
CVE-2022-2514 6.1 The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim. 2022-07-27 19:29:00
CVE-2020-36557 5.1 A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. 2022-07-27 19:24:00
CVE-2020-36558 5.1 A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. 2022-07-27 19:23:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/40089
Zapisa po stranici: