CVE-2022-36432
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik AçıklarıGelişmeleri izleyin.
Gelişmeleri izleyin.
Riskleri önceliklendirin.
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2022-39834 (primekey_ejbca)
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to […]
İçeriği inceleyinCVE-2021-38819
A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through “id” parameter on the album page. Zafiyet ile […]
İçeriği inceleyinCVE-2022-39317
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset […]
İçeriği inceleyinCVE-2022-39318 (freerdp)
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A […]
İçeriği inceleyinCVE-2022-39319 (freerdp)
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` […]
İçeriği inceleyinCVE-2022-39316 (freerdp)
FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX […]
İçeriği inceleyinCVE-2022-39320
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types […]
İçeriği inceleyinCVE-2022-39347 (freerdp)
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check […]
İçeriği inceleyinCVE-2022-39383 (kubevela)
KubeVela is an open source application delivery platform. Users using the VelaUX APIServer could be affected by this vulnerability. When using Helm […]
İçeriği inceleyinCVE-2022-34354 (partner_engagement_manager)
IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another […]
İçeriği inceleyinCVE-2022-4022 (svg_support)
The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are not […]
İçeriği inceleyin