Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-33615 8.5 RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type. 2022-06-09 15:05:00
CVE-2022-29233 5.0 BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc-1, an attacker can circumvent access controls to gain access to all breakout rooms of the meeting they are in. The permission che 2022-06-09 14:56:00
CVE-2021-32546 6.5 Missing input validation in internal/db/repo_editor.go in Gogs before 0.12.8 allows an attacker to execute code remotely. An unprivileged attacker (registered user) can overwrite the Git configuration in his repository. This leads to Remote Command E 2022-06-09 14:49:00
CVE-2022-29232 4.0 BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the ser 2022-06-09 14:45:00
CVE-2022-29258 4.3 XWiki Platform Filter UI provides a generic user interface to convert from a XWiki Filter input stream to an output stream with settings for each stream. Starting with versions 6.0-milestone-2 and 5.4.4 and prior to versions 12.10.11, 14.0-rc-1, 13.4 2022-06-09 14:25:00
CVE-2021-33254 5.0 An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function. 2022-06-09 12:17:00
CVE-2021-27778 3.5 HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious scr 2022-06-08 20:23:00
CVE-2022-31000 4.3 solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (CSRF) vulnerability. The vulnerability allows attackers to change the state of an order's a 2022-06-08 20:13:00
CVE-2022-1285 4.3 Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8. 2022-06-08 19:53:00
CVE-2022-31265 6.8 The replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to execute code when a user launches a replay from an untrusted source. 2022-06-08 19:29:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39679
Zapisa po stranici: