| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-33122 | 3.5 | A stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page. | 2022-06-30 18:12:00 | 2022-06-24 21:15:00 |
| CVE-2022-33121 | 5.8 | A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link. | 2022-06-30 17:56:00 | 2022-06-24 21:15:00 |
| CVE-2022-26863 | 7.2 | Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM. | 2022-06-30 17:47:00 | 2022-06-23 18:15:00 |
| CVE-2022-26862 | 7.2 | Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM. | 2022-06-30 17:47:00 | 2022-06-23 18:15:00 |
| CVE-2022-33067 | 4.3 | Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions get_magic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors. | 2022-06-30 17:40:00 | 2022-06-23 17:15:00 |
| CVE-2021-39408 | 4.3 | Cross Site Scripting (XSS) vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file | 2022-06-30 17:25:00 | 2022-06-24 17:15:00 |
| CVE-2012-3158 | 7.5 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol. | 2022-06-30 17:14:00 | 2012-10-16 23:55:00 |
| CVE-2021-38871 | 3.5 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent | 2022-06-30 16:53:00 | 2022-06-24 17:15:00 |
| CVE-2020-25249 | 5.0 | An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The server typically logs activity only when a client application specifies that logging is de | 2022-06-30 16:44:00 | 2020-09-11 03:15:00 |
| CVE-2020-25252 | 6.8 | An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. CSRF can be used to log in a user, and then perform actions, because there are default | 2022-06-30 16:43:00 | 2020-09-11 03:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: