Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2022-24073 5.8 The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store. 2022-03-23 18:44:00
CVE-2021-23556 6.0 The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_command_by_uuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary 2022-03-23 18:42:00
CVE-2022-25760 10.0 All versions of package accesslog are vulnerable to Arbitrary Code Injection due to the usage of the Function constructor without input sanitization. If (attacker-controlled) user input is given to the format option of the package's exported construc 2022-03-23 18:40:00
CVE-2022-26131 7.5 Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals. 2022-03-23 18:37:00
CVE-2022-25495 7.5 The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file. 2022-03-23 18:35:00
CVE-2022-25497 5.0 CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function. 2022-03-23 18:33:00
CVE-2021-45792 3.5 Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php. 2022-03-23 18:25:00
CVE-2022-25494 7.5 Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff_login.php. 2022-03-23 18:25:00
CVE-2022-25489 3.5 Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php. 2022-03-23 18:24:00
CVE-2022-25488 7.5 Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. 2022-03-23 18:23:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: