Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-44864 4.0 TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash router httpd services via /userRpm/PingIframeRpm.htm request which contains redundant & in parameter. 2022-02-11 16:53:00
CVE-2022-23340 7.5 Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results. 2022-02-11 16:50:00
CVE-2022-21799 2.9 Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitrary script via unspecified vectors. 2022-02-11 16:18:00
CVE-2022-0504 4.0 Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. 2022-02-11 16:18:00
CVE-2021-25004 4.0 The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a passw 2022-02-11 16:10:00
CVE-2022-0509 3.5 Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1. 2022-02-11 15:52:00
CVE-2022-22146 4.3 Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. 2022-02-11 15:51:00
CVE-2022-22161 5.0 An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-ba 2022-02-11 15:36:00
CVE-2021-30792 6.8 An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution. 2022-02-11 15:21:00
CVE-2021-30838 9.3 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to execute arbitrary code with system privileges on devices with an Apple Neural Engine. 2022-02-11 15:19:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39855
Zapisa po stranici: