| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-28579 | 4.0 | Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participant | 2022-10-25 23:47:00 | 2021-06-28 15:15:00 |
| CVE-2021-33538 | 9.0 | In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user acc | 2022-10-25 23:43:00 | 2021-06-25 19:15:00 |
| CVE-2021-21557 | 7.2 | Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code | 2022-10-25 23:43:00 | 2021-06-14 19:15:00 |
| CVE-2021-21554 | 7.2 | Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious u | 2022-10-25 23:43:00 | 2021-06-14 19:15:00 |
| CVE-2021-24359 | 5.0 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on b | 2022-10-25 23:43:00 | 2021-06-14 14:15:00 |
| CVE-2021-23182 | 2.1 | Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1 | 2022-10-25 23:43:00 | 2021-06-11 16:15:00 |
| CVE-2021-22906 | 4.0 | Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users. | 2022-10-25 23:42:00 | 2021-06-11 16:15:00 |
| CVE-2021-24318 | 5.5 | The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user making the request, allowing any authenticated users to delete arbitrary page/post and booking via an IDOR vector. | 2022-10-25 23:38:00 | 2021-06-01 14:15:00 |
| CVE-2021-29613 | 3.6 | TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `tf.raw_ops.CTCLoss` allows an attacker to trigger an OOB read from heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick these comm | 2022-10-25 23:38:00 | 2021-05-14 20:15:00 |
| CVE-2021-22118 | 4.6 | In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or | 2022-10-25 20:57:00 | 2021-05-27 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: