| Page(s) : 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 ... | Result(s) : 231460 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| N/A | 2023-01-27 | CVE-2022-43979 | cve | There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain ... |
| N/A | 2023-01-27 | CVE-2022-43980 | cve | There is a stored cross-site scripting vulnerability in Pandora FMS v765 in the network maps editing functionality. An attacker could modify a network map, including on purpose ... |
| N/A | 2023-01-27 | CVE-2022-46968 | cve | A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a craft... |
| N/A | 2023-01-27 | CVE-2022-4201 | cve | A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when config... |
| N/A | 2023-01-27 | CVE-2022-4205 | cve | In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash. |
| N/A | 2023-01-27 | CVE-2022-4255 | cve | An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webh... |
| N/A | 2023-01-27 | CVE-2023-0556 | cve | The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This... |
| N/A | 2023-01-27 | CVE-2023-0557 | cve | The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obt... |
| N/A | 2023-01-27 | CVE-2023-0558 | cve | The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including... |
| N/A | 2023-01-27 | CVE-2022-47632 | cve | Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attacker... |
| N/A | 2023-01-27 | CVE-2022-48066 | cve | An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie. |
| N/A | 2023-01-27 | CVE-2022-48067 | cve | An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack. |
| N/A | 2023-01-27 | CVE-2022-48069 | cve | Totolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter. |
| N/A | 2023-01-27 | CVE-2022-48070 | cve | Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. |
| N/A | 2023-01-27 | CVE-2022-48071 | cve | Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. |
| N/A | 2023-01-27 | CVE-2022-48072 | cve | Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. |
| N/A | 2023-01-27 | CVE-2022-48073 | cve | Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. |
| N/A | 2023-01-27 | CVE-2021-21395 | cve | Magneto LTS (Long Term Support) is a community developed alternative to the Magento CE official releases. Versions prior to 19.4.22 and 20.0.19 are vulnerable to Cross-Site Requ... |
| N/A | 2023-01-27 | CVE-2021-39217 | cve | OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.2... |
| N/A | 2023-01-27 | CVE-2022-46182 | cve | ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none. |
| Page(s) : 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 ... | Result(s) : 231460 |
