CVE-2022-35254
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik Açıkları
Güvenlik Açıkları
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2022-35255
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. There […]
İçeriği inceleyinCVE-2022-35256
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. […]
İçeriği inceleyinCVE-2022-35258
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, […]
İçeriği inceleyinCVE-2022-35259 (endpoint_manager)
XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to […]
İçeriği inceleyinCVE-2022-35260 (curl)
curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space […]
İçeriği inceleyinCVE-2022-37325 (asterisk)
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a […]
İçeriği inceleyinCVE-2022-37783 (craft_cms)
All Craft CMS versions between 3.0.0 and 3.7.32 disclose password hashes of users who authenticate using their E-Mail address or username in […]
İçeriği inceleyinCVE-2021-34181 (tomexam)
Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için […]
İçeriği inceleyinCVE-2022-23467 (openrazer)
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified […]
İçeriği inceleyinCVE-2022-3677 (advanced_import)
The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which could allow attackers to […]
İçeriği inceleyinCVE-2022-3694 (syncee_-_global_dropshipping)
The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator’s account. Zafiyet ile […]
İçeriği inceleyin