| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-24705 | 7.5 | The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed buffer that causes a buffer overflow and overwrites arbitrary memory. If the server connects with a malicious cl | 2022-02-19 04:16:00 | 2022-02-14 22:15:00 |
| CVE-2022-24704 | 7.5 | The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is copied into a fixed buffer &attr->val.integer without any bound checks. If the client connects to the server an | 2022-02-19 04:16:00 | 2022-02-14 22:15:00 |
| CVE-2021-46557 | 3.5 | Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the input tabs. | 2022-02-19 04:14:00 | 2022-02-15 11:15:00 |
| CVE-2021-46458 | 5.0 | Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. This vulnerability can be exploited through a crafted POST request via the post_title parameter. | 2022-02-19 04:13:00 | 2022-01-31 16:15:00 |
| CVE-2010-1171 | 5.5 | Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and pa | 2022-02-19 04:12:00 | 2011-04-18 17:55:00 |
| CVE-2007-2161 | 4.3 | Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/. | 2022-02-19 04:09:00 | 2007-04-22 19:19:00 |
| CVE-2022-0633 | 4.0 | The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber | 2022-02-18 21:19:00 | 2022-02-17 19:15:00 |
| CVE-2022-24003 | 5.0 | Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent. | 2022-02-18 20:59:00 | 2022-02-11 18:15:00 |
| CVE-2022-23425 | 7.5 | Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station. | 2022-02-18 20:57:00 | 2022-02-11 18:15:00 |
| CVE-2022-23997 | 4.3 | Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission. | 2022-02-18 20:53:00 | 2022-02-11 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: