| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1660 | 10.0 | The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code. | 2022-06-09 20:08:00 | 2022-06-02 14:15:00 |
| CVE-2022-29648 | 3.5 | A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request. | 2022-06-09 19:55:00 | 2022-06-02 14:15:00 |
| CVE-2022-29653 | 4.3 | OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json. | 2022-06-09 19:53:00 | 2022-06-02 14:15:00 |
| CVE-2021-28509 | 3.6 | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might lea | 2022-06-09 19:08:00 | 2022-05-26 20:15:00 |
| CVE-2021-28508 | 3.6 | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might lea | 2022-06-09 19:08:00 | 2022-05-26 20:15:00 |
| CVE-2022-26491 | 4.3 | An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the or | 2022-06-09 19:01:00 | 2022-06-02 14:15:00 |
| CVE-2021-44080 | 9.0 | A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnosti | 2022-06-09 18:59:00 | 2022-06-02 14:15:00 |
| CVE-2022-26972 | 4.3 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS. | 2022-06-09 18:49:00 | 2022-06-02 14:15:00 |
| CVE-2022-26973 | 5.0 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details. | 2022-06-09 18:48:00 | 2022-06-02 14:15:00 |
| CVE-2022-26975 | 5.0 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication. | 2022-06-09 18:47:00 | 2022-06-02 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: