| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-20523 | 5.0 | Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query conte | 2022-04-19 15:36:00 | 2019-06-07 16:29:00 |
| CVE-2018-7851 | 6.8 | CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a sp | 2022-04-19 15:35:00 | 2019-05-22 20:29:00 |
| CVE-2022-24837 | 5.0 | HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enumerable filename after the upload, resulting in potential information leakage of uploaded documents. T | 2022-04-19 15:30:00 | 2022-04-11 21:15:00 |
| CVE-2022-24833 | 4.3 | PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin < v1.4.0 a cross-site scripting (XSS) vulnerability was found. The vulnerability is present in all versions from v0.21 of th | 2022-04-19 15:29:00 | 2022-04-11 21:15:00 |
| CVE-2022-24832 | 4.9 | GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD Server fails to correctly escape special characters when using the username to construct LDAP queries. While this does not directl | 2022-04-19 15:25:00 | 2022-04-11 21:15:00 |
| CVE-2022-24811 | 3.5 | Combodi iTop is a web based IT Service Management tool. Prior to versions 2.7.6 and 3.0.0, cross-site scripting is possible for scripts outside of script tags when displaying HTML attachments. This issue is fixed in versions 2.7.6 and 3.0.0. There ar | 2022-04-19 15:21:00 | 2022-04-05 19:15:00 |
| CVE-2022-24827 | 6.8 | Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns (A column that requires a client provi | 2022-04-19 15:20:00 | 2022-04-11 21:15:00 |
| CVE-2022-24829 | 4.3 | Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints did not require authentication. In some operating modes this allows for an attacker to gain access to the application erroneously | 2022-04-19 15:20:00 | 2022-04-11 20:15:00 |
| CVE-2022-22256 | 5.0 | The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. | 2022-04-19 14:49:00 | 2022-04-11 20:15:00 |
| CVE-2022-27843 | 4.4 | DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code. | 2022-04-19 14:42:00 | 2022-04-11 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: