| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22519 | 5.0 | A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system. | 2022-05-10 15:22:00 | 2022-04-07 19:15:00 |
| CVE-2022-29555 | 6.8 | The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking. | 2022-05-10 15:19:00 | 2022-04-28 20:15:00 |
| CVE-2022-1331 | 4.3 | In four instances DMARS (All versions prior to v2.1.10.24) does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure. | 2022-05-10 14:25:00 | 2022-05-03 19:15:00 |
| CVE-2022-21949 | 9.0 | A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to | 2022-05-10 14:17:00 | 2022-05-03 08:15:00 |
| CVE-2022-23063 | 6.5 | In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the pa | 2022-05-10 13:49:00 | 2022-05-03 09:15:00 |
| CVE-2022-1554 | 5.0 | Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52. | 2022-05-10 13:47:00 | 2022-05-03 09:15:00 |
| CVE-2021-39390 | 3.5 | Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter. | 2022-05-10 13:37:00 | 2022-05-03 13:15:00 |
| CVE-2022-29265 | 5.0 | Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. T | 2022-05-10 13:25:00 | 2022-04-30 08:15:00 |
| CVE-2021-25102 | 2.6 | The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is | 2022-05-10 13:14:00 | 2022-05-02 16:15:00 |
| CVE-2022-24898 | 4.0 | org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running | 2022-05-10 12:47:00 | 2022-04-28 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: