| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-0570 | 7.5 | Heap-based Buffer Overflow in Homebrew mruby prior to 3.2. | 2022-02-22 21:19:00 | 2022-02-14 12:15:00 |
| CVE-2022-23638 | 4.3 | svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available. | 2022-02-22 21:06:00 | 2022-02-14 21:15:00 |
| CVE-2022-0532 | 4.9 | An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork | 2022-02-22 20:56:00 | 2022-02-09 23:15:00 |
| CVE-2022-23637 | 3.5 | K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting (XSS) vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A | 2022-02-22 20:53:00 | 2022-02-14 21:15:00 |
| CVE-2022-23391 | 4.3 | A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box. | 2022-02-22 20:53:00 | 2022-02-14 21:15:00 |
| CVE-2021-45005 | 7.5 | Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements. | 2022-02-22 20:37:00 | 2022-02-14 22:15:00 |
| CVE-2021-46361 | 7.5 | An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload. | 2022-02-22 20:21:00 | 2022-02-11 21:15:00 |
| CVE-2021-23555 | 10.0 | The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine. | 2022-02-22 20:12:00 | 2022-02-11 20:15:00 |
| CVE-2021-20001 | 7.5 | It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation. | 2022-02-22 20:10:00 | 2022-02-11 20:15:00 |
| CVE-2000-0672 | 5.0 | The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory. | 2022-02-22 20:00:00 | 2000-07-20 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: