| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22191 | 6.1 | A Denial of Service (DoS) vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast domain, may allow an unauthenticated network-adjacent attacker to trigger a | 2022-04-21 09:49:00 | 2022-04-14 16:15:00 |
| CVE-2022-22188 | 4.3 | An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a D | 2022-04-21 09:44:00 | 2022-04-14 16:15:00 |
| CVE-2022-22186 | 6.4 | Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface (em0) but not destined to the device, may be improperly forwarded to an egress interface, instead of being di | 2022-04-21 09:42:00 | 2022-04-14 16:15:00 |
| CVE-2022-22182 | 4.3 | A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions, including an administrator. | 2022-04-21 09:30:00 | 2022-04-14 16:15:00 |
| CVE-2022-22181 | 3.5 | A reflected Cross-site Scripting (XSS) vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web | 2022-04-21 09:26:00 | 2022-04-14 16:15:00 |
| CVE-2021-45228 | 3.5 | An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is | 2022-04-21 09:21:00 | 2022-04-14 15:15:00 |
| CVE-2021-45227 | 3.5 | An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack. | 2022-04-21 09:21:00 | 2022-04-14 15:15:00 |
| CVE-2022-27479 | 7.5 | Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue. | 2022-04-21 02:42:00 | 2022-04-13 19:15:00 |
| CVE-2022-27503 | 2.6 | Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9 | 2022-04-21 02:32:00 | 2022-04-13 18:15:00 |
| CVE-2022-27847 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to import templates. | 2022-04-21 02:26:00 | 2022-04-13 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: