| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22781 | 5.0 | The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed | 2022-05-09 18:21:00 | 2022-04-28 15:15:00 |
| CVE-2022-29585 | 5.0 | In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used. They are all shown from page 2 of the group results list (rather than only being shown for the institution tha | 2022-05-09 18:15:00 | 2022-04-28 16:15:00 |
| CVE-2022-24887 | 5.8 | Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can be tricked i | 2022-05-09 17:59:00 | 2022-04-27 14:15:00 |
| CVE-2022-27905 | 9.0 | In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive (C:\) to exploit this. | 2022-05-09 17:49:00 | 2022-04-27 14:15:00 |
| CVE-2022-23061 | 5.5 | In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecure Direct Object Reference (IDOR) vulnerability. | 2022-05-09 17:37:00 | 2022-05-01 13:15:00 |
| CVE-2022-23060 | 3.5 | A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaScript in the filename under the “Manage files” tab | 2022-05-09 17:32:00 | 2022-05-01 13:15:00 |
| CVE-2022-29969 | 4.3 | The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true). | 2022-05-09 17:08:00 | 2022-05-02 05:15:00 |
| CVE-2022-27962 | 7.5 | Bluecms 1.6 has a SQL injection vulnerability at cooike. | 2022-05-09 17:04:00 | 2022-05-03 17:15:00 |
| CVE-2022-1046 | 3.5 | The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed | 2022-05-09 17:01:00 | 2022-05-02 16:15:00 |
| CVE-2021-42218 | 5.0 | OMPL v1.5.2 contains a memory leak in VFRRT.cpp | 2022-05-09 16:57:00 | 2022-05-03 11:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: