| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22513 | 3.5 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. | 2022-05-10 16:00:00 | 2022-04-07 19:15:00 |
| CVE-2022-1175 | 4.3 | Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes. | 2022-05-10 16:00:00 | 2022-04-04 20:15:00 |
| CVE-2022-1166 | 5.0 | The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing | 2022-05-10 15:57:00 | 2022-04-04 16:15:00 |
| CVE-2021-22572 | 2.1 | On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the system temporary directory with world readable permissions. Any sensitive information writ | 2022-05-10 15:57:00 | 2022-03-29 15:15:00 |
| CVE-2022-29967 | 5.0 | static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal. | 2022-05-10 15:56:00 | 2022-04-29 23:15:00 |
| CVE-2022-26565 | 3.5 | A cross-site scripting (XSS) vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page. | 2022-05-10 15:46:00 | 2022-04-01 22:15:00 |
| CVE-2020-13543 | 6.8 | A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a we | 2022-05-10 15:46:00 | 2020-12-03 17:15:00 |
| CVE-2021-20289 | 5.0 | A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JA | 2022-05-10 15:45:00 | 2021-03-26 17:15:00 |
| CVE-2021-22571 | 2.1 | A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above. | 2022-05-10 15:25:00 | 2022-03-18 11:15:00 |
| CVE-2022-29556 | 7.5 | The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provides several SSRF primitives that can execute cross-tenant actions via internal API endpoints. | 2022-05-10 15:24:00 | 2022-04-28 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: