CVE-2022-35258
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik AçıklarıGelişmeleri izleyin.
Gelişmeleri izleyin.
Riskleri önceliklendirin.
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2022-35259 (endpoint_manager)
XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to […]
İçeriği inceleyinCVE-2022-35260 (curl)
curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space […]
İçeriği inceleyinCVE-2022-37325 (asterisk)
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a […]
İçeriği inceleyinCVE-2022-37783 (craft_cms)
All Craft CMS versions between 3.0.0 and 3.7.32 disclose password hashes of users who authenticate using their E-Mail address or username in […]
İçeriği inceleyinCVE-2021-34181 (tomexam)
Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için […]
İçeriği inceleyinCVE-2022-23467 (openrazer)
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified […]
İçeriği inceleyinCVE-2022-3677 (advanced_import)
The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which could allow attackers to […]
İçeriği inceleyinCVE-2022-3694 (syncee_-_global_dropshipping)
The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator’s account. Zafiyet ile […]
İçeriği inceleyinCVE-2022-3830 (wp_page_builder)
The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege […]
İçeriği inceleyinCVE-2022-3837 (uji_countdown)
The Uji Countdown WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow high privilege users […]
İçeriği inceleyinCVE-2022-3838 (wpupper_share_buttons)
The WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could allow high privilege […]
İçeriği inceleyin