| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-25076 | 6.5 | The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL injection. Due to the lack of sanitisation and escaping, this cou | 2022-03-18 21:02:00 | 2022-01-24 08:15:00 |
| CVE-2022-0557 | 9.0 | OS Command Injection in Packagist microweber/microweber prior to 1.2.11. | 2022-03-18 21:00:00 | 2022-02-11 09:15:00 |
| CVE-2022-22993 | 8.3 | A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating a whitelis | 2022-03-18 20:51:00 | 2022-01-28 20:15:00 |
| CVE-2021-37419 | 5.0 | Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF. | 2022-03-18 20:43:00 | 2021-09-21 13:15:00 |
| CVE-2021-42577 | 5.0 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference. | 2022-03-18 20:41:00 | 2022-03-11 23:15:00 |
| CVE-2021-42262 | 4.0 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition. | 2022-03-18 20:41:00 | 2022-03-11 23:15:00 |
| CVE-2022-26337 | 9.3 | Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate l | 2022-03-18 20:36:00 | 2022-03-08 22:15:00 |
| CVE-2022-24726 | 5.0 | Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, istiod, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which resu | 2022-03-18 20:20:00 | 2022-03-10 21:15:00 |
| CVE-2022-23731 | 4.6 | V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models. | 2022-03-18 20:18:00 | 2022-03-11 18:15:00 |
| CVE-2022-23625 | 4.0 | Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malfor | 2022-03-18 20:16:00 | 2022-03-11 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: