| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-44499 | 5.0 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which i | 2022-04-22 16:10:00 | 2022-04-15 18:15:00 |
| CVE-2020-17456 | 7.5 | SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. | 2022-04-22 16:02:00 | 2020-08-20 01:17:00 |
| CVE-2022-24320 | 4.3 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA database server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure | 2022-04-22 16:01:00 | 2022-02-09 23:15:00 |
| CVE-2022-24319 | 4.3 | A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo S | 2022-04-22 16:01:00 | 2022-02-09 23:15:00 |
| CVE-2021-41125 | 4.0 | Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests will expose your credentials to the request target. | 2022-04-22 16:00:00 | 2021-10-06 18:15:00 |
| CVE-2021-44498 | 5.0 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer | 2022-04-22 15:58:00 | 2022-04-15 18:15:00 |
| CVE-2021-44497 | 5.0 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free m | 2022-04-22 15:57:00 | 2022-04-15 18:15:00 |
| CVE-2021-44496 | 7.5 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data stru | 2022-04-22 15:55:00 | 2022-04-15 18:15:00 |
| CVE-2022-22966 | 6.5 | An authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider may be able to exploit a remote code execution vulnerability to gain access to the server. | 2022-04-22 15:54:00 | 2022-04-14 21:15:00 |
| CVE-2022-27369 | 6.5 | Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy. | 2022-04-22 15:37:00 | 2022-04-15 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: