| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-16611 | 4.9 | In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files. | 2022-02-20 06:06:00 | 2017-12-01 17:29:00 |
| CVE-2017-17087 | 2.1 | fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an | 2022-02-20 05:58:00 | 2017-12-01 08:29:00 |
| CVE-2017-15908 | 5.0 | In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected ser | 2022-02-20 05:58:00 | 2017-10-26 14:29:00 |
| CVE-2021-25050 | 3.5 | The Remove Footer Credit WordPress plugin before 1.0.11 does properly sanitise its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. | 2022-02-19 04:51:00 | 2022-02-14 12:15:00 |
| CVE-2021-25018 | 3.5 | The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any authenticated to call it and set arbitrary settings. Furthermore, due to the lack of sanitis | 2022-02-19 04:47:00 | 2022-02-14 12:15:00 |
| CVE-2022-0307 | 6.8 | Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. | 2022-02-19 04:44:00 | 2022-02-12 02:15:00 |
| CVE-2021-24563 | 4.3 | The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone a | 2022-02-19 04:44:00 | 2021-10-11 11:15:00 |
| CVE-2022-0304 | 6.8 | Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. | 2022-02-19 04:42:00 | 2022-02-12 02:15:00 |
| CVE-2022-0302 | 6.8 | Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. | 2022-02-19 04:41:00 | 2022-02-12 02:15:00 |
| CVE-2022-0296 | 6.8 | Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page. | 2022-02-19 04:39:00 | 2022-02-12 02:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: