| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-0707 | 7.2 | In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: | 2022-04-20 14:26:00 | 2022-04-12 17:15:00 |
| CVE-2021-0694 | 7.2 | In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to insufficient background restrictions. This could lead to local escalation of privilege with no add | 2022-04-20 14:25:00 | 2022-04-12 17:15:00 |
| CVE-2022-28772 | 5.0 | By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, | 2022-04-20 14:24:00 | 2022-04-12 17:15:00 |
| CVE-2022-28770 | 4.3 | Due to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information c | 2022-04-20 14:21:00 | 2022-04-12 17:15:00 |
| CVE-2018-8770 | 5.0 | Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, control | 2022-04-20 14:14:00 | 2018-03-18 06:29:00 |
| CVE-2022-21803 | 5.0 | This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to | 2022-04-20 14:07:00 | 2022-04-12 16:15:00 |
| CVE-2021-42255 | 7.2 | AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user. | 2022-04-20 13:51:00 | 2022-04-12 16:15:00 |
| CVE-2022-22541 | 4.0 | SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shoul | 2022-04-20 13:01:00 | 2022-04-12 17:15:00 |
| CVE-2022-27476 | 4.3 | A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter. | 2022-04-20 12:59:00 | 2022-04-10 21:15:00 |
| CVE-2022-25614 | 4.3 | Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows an attacker to Sync with Zoom Meetings. | 2022-04-20 12:57:00 | 2022-04-11 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: