| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-28859 | 4.0 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which h | 2022-05-13 12:56:00 | 2022-05-05 17:15:00 |
| CVE-2022-25165 | 6.9 | An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior | 2022-05-13 12:37:00 | 2022-04-14 16:15:00 |
| CVE-2022-26148 | 7.5 | An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source cod | 2022-05-13 11:59:00 | 2022-03-21 20:15:00 |
| CVE-2021-25268 | 6.0 | Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA. | 2022-05-13 04:26:00 | 2022-05-05 18:15:00 |
| CVE-2021-25267 | 8.5 | Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA. | 2022-05-13 04:26:00 | 2022-05-05 18:15:00 |
| CVE-2022-29592 | 10.0 | Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route). | 2022-05-13 04:25:00 | 2022-05-05 17:15:00 |
| CVE-2022-28606 | 7.5 | An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server. | 2022-05-13 04:17:00 | 2022-05-05 17:15:00 |
| CVE-2022-28120 | 7.5 | Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server. | 2022-05-13 04:16:00 | 2022-05-05 17:15:00 |
| CVE-2022-27360 | 7.5 | SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment. | 2022-05-13 04:07:00 | 2022-05-05 19:15:00 |
| CVE-2022-27634 | 6.5 | On 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, BIG-IP APM does not properly validate configurations, allowing an authenticated attacker with high privileges to manipulate the APM policy leading to privilege escalation/rem | 2022-05-13 04:03:00 | 2022-05-05 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: