| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-24954 | 7.5 | Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings. | 2022-02-17 03:27:00 | 2022-02-11 02:15:00 |
| CVE-2022-24955 | 7.5 | Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files. | 2022-02-17 03:22:00 | 2022-02-11 02:15:00 |
| CVE-2022-24647 | 5.5 | Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink() function. | 2022-02-17 03:14:00 | 2022-02-10 23:15:00 |
| CVE-2022-24311 | 7.5 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading | 2022-02-17 02:42:00 | 2022-02-09 23:15:00 |
| CVE-2022-23628 | 4.3 | OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies im | 2022-02-17 02:37:00 | 2022-02-09 22:15:00 |
| CVE-2022-24310 | 7.5 | A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Produc | 2022-02-17 02:28:00 | 2022-02-09 23:15:00 |
| CVE-2022-23049 | 3.5 | Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. When an administrator user visits the "User Sessions" tab, the JavaScript will be triggered allowing an attacker to | 2022-02-17 02:17:00 | 2022-02-09 23:15:00 |
| CVE-2022-22780 | 7.8 | The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows befo | 2022-02-17 02:12:00 | 2022-02-09 23:15:00 |
| CVE-2022-23048 | 6.5 | Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where can be access | 2022-02-17 02:06:00 | 2022-02-09 23:15:00 |
| CVE-2021-45106 | 4.0 | A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the database. | 2022-02-16 22:32:00 | 2022-02-09 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: