Page(s) : 1 ... 457 458 459 460 461 462 463 464 465 466 [467] 468 469 470 471 472 473 474 475 476 477 ... | Result(s) : 43350 |
Alerts
DATE | NAME | CATEGORIES | DETAIL | |
---|---|---|---|---|
9.8 | 2022-12-07 | CVE-2022-45010 | cve | Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php. |
9.8 | 2022-12-07 | CVE-2022-45025 | cve | Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function. |
9.8 | 2022-12-07 | CVE-2022-45026 | cve | An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process. |
9.3 | 2022-12-06 | CVE-2022-41559 | cve | The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to e... |
9.8 | 2022-12-06 | CVE-2022-46161 | cve | pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled inpu... |
9.1 | 2022-12-06 | CVE-2022-44900 | cve | A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extra... |
9.6 | 2022-12-06 | CVE-2022-46332 | cve | The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain ... |
9.8 | 2022-12-06 | CVE-2022-45359 | cve | Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin |
9.1 | 2022-12-06 | CVE-2022-41902 | cve | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs g... |
9.1 | 2022-12-06 | CVE-2022-41910 | cve | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs g... |
9.8 | 2022-12-06 | CVE-2020-6627 | cve | The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_backend_launch in cirrus/application/h... |
9.8 | 2022-12-06 | CVE-2022-46383 | cve | RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has exposed a privileged token via a public API endpoint (... |
9.8 | 2022-12-06 | CVE-2022-35843 | cve | An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, 6.4.0 through 6.4.9, 6.2 all versions... |
9.8 | 2022-12-06 | CVE-2022-24439 | cve | All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted re... |
9.8 | 2022-12-06 | CVE-2022-25912 | cve | The package simple-git before 3.15.0 are vulnerable to Remote Code Execution (RCE) when enabling the ext transport protocol, which makes it exploitable via clone() method. This ... |
9.1 | 2022-12-06 | CVE-2022-38337 | cve | When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as an invalid login attempt which can result in a Denial... |
9.8 | 2022-12-06 | CVE-2022-40918 | cve | Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specia... |
9.8 | 2022-12-05 | CVE-2022-43515 | cve | Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be abl... |
9.8 | 2022-12-05 | CVE-2022-43516 | cve | A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI) |
9.8 | 2022-12-05 | CVE-2022-44039 | cve | Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite (remote). ¶¶ An attacker can overwrite system files lik... |
Page(s) : 1 ... 457 458 459 460 461 462 463 464 465 466 [467] 468 469 470 471 472 473 474 475 476 477 ... | Result(s) : 43350 |