Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-39668 7.2 In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. 2022-02-17 20:07:00
CVE-2021-39666 2.1 In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation 2022-02-17 20:07:00
CVE-2021-39669 4.4 In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circumstances due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileg 2022-02-17 20:03:00
CVE-2022-23630 6.0 Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept a dependency that would otherwise fail the build as an untrusted external artifact. This o 2022-02-17 17:41:00
CVE-2022-0021 1.9 An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This 2022-02-17 16:01:00
CVE-2021-26706 7.5 An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: Mem_PoolCreate, Mem_DynPoolCreat 2022-02-17 15:43:00
CVE-2022-0560 5.8 Open Redirect in Packagist microweber/microweber prior to 1.2.11. 2022-02-17 15:33:00
CVE-2022-0019 1.9 An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other 2022-02-17 15:25:00
CVE-2022-0018 2.6 An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account are sent to the GlobalProtect portal when the Single Sign-On feature is enabled in the Globa 2022-02-17 15:10:00
CVE-2021-37613 2.9 Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. 2022-02-17 14:49:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39855
Zapisa po stranici: