| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-27846 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create or modify slider. | 2022-04-21 02:24:00 | 2022-04-13 18:15:00 |
| CVE-2022-0221 | 4.3 | A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass | 2022-04-21 01:50:00 | 2022-04-13 16:15:00 |
| CVE-2022-25615 | 4.3 | Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows cache deletion. | 2022-04-21 01:40:00 | 2022-04-11 20:15:00 |
| CVE-2022-28542 | 2.1 | Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission. | 2022-04-21 01:39:00 | 2022-04-11 20:15:00 |
| CVE-2022-27844 | 5.0 | Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70 | 2022-04-21 01:33:00 | 2022-04-11 20:15:00 |
| CVE-2021-42136 | 3.5 | A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows remote attackers to execute JavaScript code in the client's browser by storing said code as a Missing Data Code value. This can t | 2022-04-21 01:30:00 | 2022-04-13 16:15:00 |
| CVE-2022-1280 | 3.3 | A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak. | 2022-04-20 19:46:00 | 2022-04-13 18:15:00 |
| CVE-2022-1332 | 4.0 | One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file | 2022-04-20 19:37:00 | 2022-04-13 18:15:00 |
| CVE-2021-22795 | 7.5 | A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert (V7.8.1 | 2022-04-20 19:30:00 | 2022-04-13 16:15:00 |
| CVE-2021-22794 | 7.5 | A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior) | 2022-04-20 19:20:00 | 2022-04-13 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: