| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-38457 | 7.5 | The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without providing any form of authentication. | 2022-10-27 16:33:00 | 2021-10-22 12:15:00 |
| CVE-2021-31375 | 5.0 | An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a specific BGP update wh | 2022-10-27 16:33:00 | 2021-10-19 19:15:00 |
| CVE-2021-33036 | 9.0 | In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. | 2022-10-27 16:30:00 | 2022-06-15 15:15:00 |
| CVE-2021-38461 | 6.4 | The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries. | 2022-10-27 16:28:00 | 2021-10-22 12:15:00 |
| CVE-2021-38463 | 5.5 | The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions. | 2022-10-27 16:27:00 | 2021-10-22 12:15:00 |
| CVE-2021-33473 | 4.9 | An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. This vulnerability is exploited via a crafted URL. | 2022-10-27 16:14:00 | 2022-06-02 20:15:00 |
| CVE-2017-10286 | 3.5 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with ne | 2022-10-27 16:08:00 | 2017-10-19 17:29:00 |
| CVE-2017-3243 | 3.5 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via mult | 2022-10-27 16:03:00 | 2017-01-27 22:59:00 |
| CVE-2019-14433 | 4.0 | An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be le | 2022-10-27 16:01:00 | 2019-08-09 19:15:00 |
| CVE-2016-7440 | 2.1 | The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences. | 2022-10-27 15:59:00 | 2016-12-13 16:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: