| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-20045 | 4.6 | In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue I | 2022-02-14 20:20:00 | 2022-02-09 23:15:00 |
| CVE-2022-20044 | 4.6 | In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue I | 2022-02-14 20:20:00 | 2022-02-09 23:15:00 |
| CVE-2022-20046 | 2.1 | In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06142410; Issue ID: AL | 2022-02-14 20:19:00 | 2022-02-09 23:15:00 |
| CVE-2022-20041 | 4.6 | In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A | 2022-02-14 20:14:00 | 2022-02-09 23:15:00 |
| CVE-2022-20040 | 4.6 | In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation | 2022-02-14 20:10:00 | 2022-02-09 23:15:00 |
| CVE-2022-20039 | 4.6 | In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06183345; Issue | 2022-02-14 19:56:00 | 2022-02-09 23:15:00 |
| CVE-2022-20024 | 4.6 | In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AL | 2022-02-14 19:53:00 | 2022-02-09 23:15:00 |
| CVE-2022-21241 | 6.8 | Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag. | 2022-02-14 19:30:00 | 2022-02-08 11:15:00 |
| CVE-2021-36302 | 9.0 | All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take | 2022-02-14 19:28:00 | 2022-02-09 20:15:00 |
| CVE-2021-45331 | 7.5 | An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once. | 2022-02-14 18:44:00 | 2022-02-09 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: