Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-42204 6.8 An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause code execution. 2022-06-08 18:34:00
CVE-2021-42203 6.8 An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution. 2022-06-08 18:34:00
CVE-2022-26697 5.8 An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpecte 2022-06-08 18:21:00
CVE-2022-1931 5.5 Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3. 2022-06-08 18:10:00
CVE-2022-26688 4.9 An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents 2022-06-08 18:09:00
CVE-2022-1643 3.5 The Birthdays Widget WordPress plugin through 1.7.18 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowe 2022-06-08 17:55:00
CVE-2022-1611 6.8 The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF. 2022-06-08 17:55:00
CVE-2022-22672 9.3 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious application may be able to execute arbit 2022-06-08 17:51:00
CVE-2021-27779 6.4 VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server. 2022-06-08 17:46:00
CVE-2013-10004 5.0 A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect imple 2022-06-08 17:44:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39679
Zapisa po stranici: