| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-39664 | 1.9 | In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction | 2022-02-15 18:01:00 | 2022-02-11 18:15:00 |
| CVE-2021-22954 | 6.8 | A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users. | 2022-02-15 17:55:00 | 2022-02-09 23:15:00 |
| CVE-2021-26613 | 5.0 | improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method. | 2022-02-15 17:54:00 | 2022-02-09 23:15:00 |
| CVE-2021-26616 | 7.5 | An OS command injection was found in SecuwaySSL, when special characters injection on execute command with runCommand arguments. | 2022-02-15 17:53:00 | 2022-02-09 23:15:00 |
| CVE-2022-21660 | 5.5 | Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the `setUserInfo` function. Users are advised to update as soo | 2022-02-15 13:10:00 | 2022-02-09 20:15:00 |
| CVE-2021-45286 | 5.0 | Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php. | 2022-02-15 13:00:00 | 2022-02-09 20:15:00 |
| CVE-2021-42833 | 4.6 | A Use of Hardcoded Credentials vulnerability exists in AquaView versions 1.60, 7.x, and 8.x that could allow an authenticated local attacker to manipulate users and system settings. | 2022-02-14 21:24:00 | 2022-02-07 19:15:00 |
| CVE-2021-20877 | 3.5 | Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers (LBP162L/LBP162, MF4890dw, MF269dw/MF265dw/MF264dw/MF262dw, MF249dw/MF245dw/MF244dw/MF242dw/MF232w, and MF229dw/MF224dw/MF222dw sold in Japan, imageC | 2022-02-14 21:07:00 | 2022-02-08 11:15:00 |
| CVE-2022-0473 | 3.5 | OTRS administrators can configure dynamic field and inject malicious JavaScript code in the error message of the regular expression check. When used in the agent interface, malicious code might be exectued in the browser. This issue affects: OTRS AG | 2022-02-14 20:40:00 | 2022-02-07 11:15:00 |
| CVE-2022-20043 | 4.6 | In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A | 2022-02-14 20:21:00 | 2022-02-09 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: