| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-34889 | 8.2 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit t | 2022-07-27 18:07:00 | 2022-07-18 15:15:00 |
| CVE-2022-34001 | 6.5 | Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously. | 2022-07-27 17:55:00 | 2022-07-19 17:15:00 |
| CVE-2022-34035 | 7.5 | HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588. | 2022-07-27 17:54:00 | 2022-07-18 21:15:00 |
| CVE-2022-34033 | 7.5 | HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273. | 2022-07-27 17:43:00 | 2022-07-18 21:15:00 |
| CVE-2015-8031 | 9.8 | Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks. | 2022-07-27 17:40:00 | 2022-07-18 21:15:00 |
| CVE-2022-24691 | 7.1 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean b | 2022-07-27 17:34:00 | 2022-07-18 13:15:00 |
| CVE-2022-24690 | 8.2 | An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauthenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is b | 2022-07-27 17:34:00 | 2022-07-18 13:15:00 |
| CVE-2022-34049 | 5.3 | An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data. | 2022-07-27 17:21:00 | 2022-07-20 17:15:00 |
| CVE-2021-40149 | 5.9 | The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI. | 2022-07-27 17:21:00 | 2022-07-17 22:15:00 |
| CVE-2019-19085 | 3.5 | A persistent cross-site scripting (XSS) vulnerability in Octopus Server 3.4.0 through 2019.10.5 allows remote authenticated attackers to inject arbitrary web script or HTML. | 2022-07-27 17:20:00 | 2019-11-18 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: