| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-11519 | 4.6 | The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution. | 2022-05-03 13:57:00 | 2020-06-22 18:15:00 |
| CVE-2022-24868 | 3.5 | GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to 10.0.0 one can exploit a lack of sanitization on SVG file uploads and inject javascript i | 2022-05-03 13:55:00 | 2022-04-21 17:15:00 |
| CVE-2020-14416 | 4.7 | In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c. | 2022-05-03 13:37:00 | 2020-06-18 11:15:00 |
| CVE-2022-24867 | 7.8 | GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldap_pass is not filte | 2022-05-03 13:26:00 | 2022-04-21 17:15:00 |
| CVE-2021-24354 | 6.5 | A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites. | 2022-05-03 13:05:00 | 2021-06-14 14:15:00 |
| CVE-2021-24307 | 9.0 | The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can r | 2022-05-03 13:05:00 | 2021-05-24 11:15:00 |
| CVE-2020-36311 | 2.1 | An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), aka CID-7be7 | 2022-05-03 13:05:00 | 2021-04-07 00:15:00 |
| CVE-2021-24184 | 6.5 | Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other actions. | 2022-05-03 13:05:00 | 2021-04-05 19:15:00 |
| CVE-2019-19343 | 5.0 | A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 | 2022-05-03 13:05:00 | 2021-03-23 21:15:00 |
| CVE-2020-4589 | 10.0 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 184585. | 2022-05-03 13:00:00 | 2020-08-13 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: