| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-39280 | 9.0 | Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-3 | 2022-02-11 03:19:00 | 2022-02-06 21:15:00 |
| CVE-2022-23206 | 5.0 | In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach. | 2022-02-11 03:16:00 | 2022-02-06 16:15:00 |
| CVE-2022-0502 | 3.5 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. | 2022-02-11 03:15:00 | 2022-02-06 11:15:00 |
| CVE-2021-38172 | 7.5 | perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.) | 2022-02-11 03:14:00 | 2022-02-05 18:15:00 |
| CVE-2022-0501 | 4.3 | Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12. | 2022-02-11 03:13:00 | 2022-02-05 16:15:00 |
| CVE-2022-24113 | 4.6 | Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Of | 2022-02-11 03:13:00 | 2022-02-04 23:15:00 |
| CVE-2022-23611 | 7.5 | iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. | 2022-02-11 03:11:00 | 2022-02-04 23:15:00 |
| CVE-2022-23609 | 6.4 | iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users | 2022-02-11 03:09:00 | 2022-02-04 23:15:00 |
| CVE-2022-23605 | 2.1 | Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemera | 2022-02-11 03:05:00 | 2022-02-04 23:15:00 |
| CVE-2022-23600 | 3.5 | fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof SAML authentication with missing audience verification. This impacts deployments using SAML SSO in two specific cases: 1. A malicio | 2022-02-11 03:04:00 | 2022-02-04 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: