| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-30057 | 3.5 | Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability. | 2022-05-20 15:02:00 | 2022-05-11 18:15:00 |
| CVE-2022-28259 | 4.3 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated | 2022-05-20 14:53:00 | 2022-05-11 18:15:00 |
| CVE-2022-28837 | 4.3 | Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabili | 2022-05-20 14:50:00 | 2022-05-11 18:15:00 |
| CVE-2022-30048 | 7.5 | Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter. | 2022-05-20 14:45:00 | 2022-05-11 18:15:00 |
| CVE-2022-30047 | 7.5 | Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter. | 2022-05-20 14:42:00 | 2022-05-11 18:15:00 |
| CVE-2022-30040 | 5.0 | Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parame | 2022-05-20 14:41:00 | 2022-05-11 18:15:00 |
| CVE-2021-31330 | 3.5 | A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authenticated attacker may inject malicious Javascript code when using Markdown editing within the application which remains persistent. | 2022-05-20 14:19:00 | 2022-05-11 18:15:00 |
| CVE-2021-26349 | 2.1 | Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA). | 2022-05-20 14:18:00 | 2022-05-11 17:15:00 |
| CVE-2022-29898 | 9.0 | On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all vers | 2022-05-20 14:16:00 | 2022-05-11 15:15:00 |
| CVE-2022-29897 | 9.0 | On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware | 2022-05-20 14:15:00 | 2022-05-11 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: