| Page(s) : 1 ... 657 658 659 660 661 662 663 664 665 666 [667] 668 669 670 671 672 673 674 675 676 677 ... | Result(s) : 43434 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| 9.8 | 2022-01-18 | CVE-2021-22566 | cve | An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leverag... |
| 9.8 | 2022-01-18 | CVE-2021-46013 | cve | An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code executi... |
| 9.1 | 2022-01-18 | CVE-2022-23408 | cve | wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. T... |
| 9.8 | 2022-01-18 | CVE-2021-38697 | cve | SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code e... |
| 9.8 | 2022-01-18 | CVE-2022-23305 | cve | By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message c... |
| 9.8 | 2022-01-18 | CVE-2021-29215 | cve | A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in version(s):... |
| 9.8 | 2022-01-18 | CVE-2021-41807 | cve | Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and ther... |
| 9.8 | 2022-01-17 | CVE-2022-23304 | cve | The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issu... |
| 9.8 | 2022-01-17 | CVE-2022-23303 | cve | The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue ex... |
| 9.8 | 2022-01-17 | CVE-2022-0239 | cve | corenlp is vulnerable to Improper Restriction of XML External Entity Reference |
| 9.8 | 2022-01-17 | CVE-2021-4171 | cve | calibre-web is vulnerable to Business Logic Errors |
| 9.8 | 2022-01-15 | CVE-2021-24044 | cve | By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error ... |
| 9.8 | 2022-01-15 | CVE-2021-33963 | cve | China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command inje... |
| 9.8 | 2022-01-15 | CVE-2022-23178 | cve | An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials ar... |
| 9.8 | 2022-01-14 | CVE-2021-39623 | cve | In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additi... |
| 9.8 | 2022-01-14 | CVE-2022-22055 | cve | The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to... |
| 9.8 | 2022-01-14 | CVE-2021-44530 | cve | An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to control the applic... |
| 9.8 | 2022-01-14 | CVE-2021-38691 | cve | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute... |
| 9.8 | 2022-01-14 | CVE-2021-38689 | cve | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute... |
| 9.8 | 2022-01-14 | CVE-2021-38690 | cve | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute... |
| Page(s) : 1 ... 657 658 659 660 661 662 663 664 665 666 [667] 668 669 670 671 672 673 674 675 676 677 ... | Result(s) : 43434 |
