| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-27822 | 2.1 | Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID value without permission. | 2022-04-18 16:54:00 | 2022-04-11 20:15:00 |
| CVE-2022-20069 | 4.4 | In preloader (usb), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User inte | 2022-04-18 16:50:00 | 2022-04-11 20:15:00 |
| CVE-2022-20068 | 4.6 | In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS | 2022-04-18 16:50:00 | 2022-04-11 20:15:00 |
| CVE-2022-20067 | 4.6 | In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: | 2022-04-18 16:47:00 | 2022-04-11 20:15:00 |
| CVE-2022-20074 | 4.4 | In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. | 2022-04-18 16:18:00 | 2022-04-11 20:15:00 |
| CVE-2019-6145 | 7.2 | Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. | 2022-04-18 16:15:00 | 2019-09-20 20:15:00 |
| CVE-2019-9458 | 4.4 | In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | 2022-04-18 16:13:00 | 2019-09-06 22:15:00 |
| CVE-2019-15780 | 7.5 | The formidable plugin before 4.02.01 for WordPress has unsafe deserialization. | 2022-04-18 16:12:00 | 2019-08-29 12:15:00 |
| CVE-2019-13237 | 4.0 | In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /sys | 2022-04-18 16:11:00 | 2019-08-27 12:15:00 |
| CVE-2019-15637 | 5.5 | Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop. | 2022-04-18 16:11:00 | 2019-08-26 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: