| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-14118 | 5.8 | An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps. | 2022-05-03 15:14:00 | 2022-04-21 18:15:00 |
| CVE-2022-24861 | 6.5 | Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code | 2022-05-03 15:02:00 | 2022-04-20 19:15:00 |
| CVE-2022-24862 | 4.0 | Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download addres | 2022-05-03 15:01:00 | 2022-04-20 19:15:00 |
| CVE-2019-9752 | 3.5 | An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause exec | 2022-05-03 14:49:00 | 2019-03-13 22:29:00 |
| CVE-2020-8437 | 5.0 | The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service. | 2022-05-03 14:29:00 | 2020-03-02 19:15:00 |
| CVE-2019-7656 | 7.2 | A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root. The installer sets too relaxed permissions on /usr/local/WowzaStreamingEngine/bin/* core program files | 2022-05-03 14:29:00 | 2020-01-29 16:15:00 |
| CVE-2020-7232 | 5.0 | Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL. | 2022-05-03 14:29:00 | 2020-01-19 20:15:00 |
| CVE-2019-19689 | 4.4 | Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses. | 2022-05-03 14:28:00 | 2019-12-18 20:15:00 |
| CVE-2019-19830 | 4.0 | _core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database. | 2022-05-03 14:28:00 | 2019-12-17 05:15:00 |
| CVE-2019-18848 | 5.0 | The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string. | 2022-05-03 14:28:00 | 2019-11-12 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: