| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-32530 | 6.8 | A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, showing the wrong server connection option or the wrong control request when a mobile device has been compromised by a malicious a | 2022-07-06 17:11:00 | 2022-06-24 13:15:00 |
| CVE-2022-33910 | 3.5 | An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a user or an admin clicks on the attachment, file_download.php opens the SVG document in a browser tab instead o | 2022-07-06 16:19:00 | 2022-06-24 17:15:00 |
| CVE-2022-21231 | 7.5 | All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7715](https://security.snyk.io/vuln/SNYK-JS-DEEPGETSET-598666) | 2022-07-06 15:43:00 | 2022-06-24 20:15:00 |
| CVE-2022-29578 | 5.0 | Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage. | 2022-07-06 15:37:00 | 2022-06-24 17:15:00 |
| CVE-2022-29097 | 4.0 | Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the | 2022-07-06 14:50:00 | 2022-06-24 17:15:00 |
| CVE-2022-29096 | 3.5 | Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or | 2022-07-06 14:44:00 | 2022-06-24 17:15:00 |
| CVE-2021-42056 | 7.2 | Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command | 2022-07-06 14:15:00 | 2022-06-24 17:15:00 |
| CVE-2022-1971 | 3.5 | The NextCellent Gallery WordPress plugin through 1.9.35 does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability i | 2022-07-06 12:51:00 | 2022-06-27 09:15:00 |
| CVE-2022-1964 | 3.5 | The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads | 2022-07-06 12:51:00 | 2022-06-27 09:15:00 |
| CVE-2022-1995 | 3.5 | The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_h | 2022-07-06 12:49:00 | 2022-06-27 09:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40236
Zapisa po stranici: