| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-37194 | 5.0 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS | 2022-05-13 13:03:00 | 2022-02-09 16:15:00 |
| CVE-2021-43928 | 6.5 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary com | 2022-05-13 13:02:00 | 2022-02-07 03:15:00 |
| CVE-2022-28859 | 4.0 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which h | 2022-05-13 12:56:00 | 2022-05-05 17:15:00 |
| CVE-2022-25165 | 6.9 | An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior | 2022-05-13 12:37:00 | 2022-04-14 16:15:00 |
| CVE-2022-26148 | 7.5 | An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source cod | 2022-05-13 11:59:00 | 2022-03-21 20:15:00 |
| CVE-2021-25268 | 6.0 | Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA. | 2022-05-13 04:26:00 | 2022-05-05 18:15:00 |
| CVE-2021-25267 | 8.5 | Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA. | 2022-05-13 04:26:00 | 2022-05-05 18:15:00 |
| CVE-2022-29592 | 10.0 | Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route). | 2022-05-13 04:25:00 | 2022-05-05 17:15:00 |
| CVE-2022-28606 | 7.5 | An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server. | 2022-05-13 04:17:00 | 2022-05-05 17:15:00 |
| CVE-2022-28120 | 7.5 | Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server. | 2022-05-13 04:16:00 | 2022-05-05 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: