| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-15139 | 6.5 | Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and acces | 2022-02-10 07:23:00 | 2018-08-13 18:29:00 |
| CVE-2018-6383 | 6.5 | Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a | 2022-02-10 07:23:00 | 2018-01-29 18:29:00 |
| CVE-2022-22804 | 3.5 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authenticated attacker to view data, change settings, or impact availability of the software when the user visits | 2022-02-10 07:06:00 | 2022-02-04 23:15:00 |
| CVE-2022-22726 | 4.0 | A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users through a limited operating system service account. Affected Product: EcoStruxure Power Monitoring Expert (Versi | 2022-02-10 07:04:00 | 2022-02-04 23:15:00 |
| CVE-2022-22725 | 8.3 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection fu | 2022-02-10 06:59:00 | 2022-02-04 23:15:00 |
| CVE-2022-22723 | 8.3 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection fu | 2022-02-10 06:57:00 | 2022-02-04 23:15:00 |
| CVE-2022-22722 | 5.4 | A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to th | 2022-02-10 06:56:00 | 2022-02-04 23:15:00 |
| CVE-2022-22689 | 6.5 | CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or c | 2022-02-10 06:54:00 | 2022-02-04 23:15:00 |
| CVE-2022-0481 | 7.8 | NULL Pointer Dereference in Homebrew mruby prior to 3.2. | 2022-02-10 06:51:00 | 2022-02-04 23:15:00 |
| CVE-2022-0472 | 3.5 | Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9. | 2022-02-10 06:49:00 | 2022-02-04 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: