| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-30047 | 7.5 | Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter. | 2022-05-20 14:42:00 | 2022-05-11 18:15:00 |
| CVE-2022-30040 | 5.0 | Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parame | 2022-05-20 14:41:00 | 2022-05-11 18:15:00 |
| CVE-2021-31330 | 3.5 | A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authenticated attacker may inject malicious Javascript code when using Markdown editing within the application which remains persistent. | 2022-05-20 14:19:00 | 2022-05-11 18:15:00 |
| CVE-2021-26349 | 2.1 | Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA). | 2022-05-20 14:18:00 | 2022-05-11 17:15:00 |
| CVE-2022-29898 | 9.0 | On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all vers | 2022-05-20 14:16:00 | 2022-05-11 15:15:00 |
| CVE-2022-29897 | 9.0 | On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware | 2022-05-20 14:15:00 | 2022-05-11 15:15:00 |
| CVE-2021-28290 | 4.3 | A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter. | 2022-05-20 13:54:00 | 2022-05-11 18:15:00 |
| CVE-2022-0024 | 9.0 | A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with ro | 2022-05-20 13:25:00 | 2022-05-11 17:15:00 |
| CVE-2021-31885 | 5.0 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All | 2022-05-20 13:15:00 | 2021-11-09 12:15:00 |
| CVE-2022-28239 | 9.3 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated | 2022-05-20 12:48:00 | 2022-05-11 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: