CVE-2022-35725 (wp-forecast)
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen’s wp-forecast plugin
İçeriği inceleyinALLSAFE / Güncel Güvenlik AçıklarıGelişmeleri izleyin.
Gelişmeleri izleyin.
Riskleri önceliklendirin.
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2022-36280
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file […]
İçeriği inceleyinCVE-2022-36356 (culture_object)
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy / Thirty8 Digital Culture Object plugin
İçeriği inceleyinCVE-2022-36376
Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin
İçeriği inceleyinCVE-2022-36422 (wp-postratings)
Rating increase/decrease via race condition in Lester ‘GaMerZ’ Chan WP-PostRatings plugin
İçeriği inceleyinCVE-2022-36423 (openharmony)
OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN […]
İçeriği inceleyinCVE-2022-26390
The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in […]
İçeriği inceleyinCVE-2022-26392
The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to […]
İçeriği inceleyinCVE-2022-26393
The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in […]
İçeriği inceleyinCVE-2022-26394
The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a […]
İçeriği inceleyinCVE-2020-10735
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(“text”), a system could take […]
İçeriği inceleyinCVE-2022-2528
In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages. […]
İçeriği inceleyin