| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-29624 | 4.3 | fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify-csrf prior to 3.1.0 have a "double submit" mechanism using cookies with an application deployed across multiple subdomains, | 2022-10-25 20:56:00 | 2021-05-19 22:15:00 |
| CVE-2021-38553 | 2.1 | HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0. | 2022-10-25 20:54:00 | 2021-08-13 16:15:00 |
| CVE-2021-32923 | 5.8 | HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequen | 2022-10-25 20:54:00 | 2021-06-03 11:15:00 |
| CVE-2021-41178 | 4.0 | Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, a file traversal vulnerability makes an attacker able to download arbitrary SVG images from the host system, including user provided files. | 2022-10-25 20:53:00 | 2021-10-25 22:15:00 |
| CVE-2020-22032 | 6.8 | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences. | 2022-10-25 20:53:00 | 2021-05-27 19:15:00 |
| CVE-2020-22025 | 6.8 | A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences. | 2022-10-25 20:52:00 | 2021-05-27 19:15:00 |
| CVE-2021-3282 | 5.0 | HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2. | 2022-10-25 20:52:00 | 2021-02-01 16:15:00 |
| CVE-2022-24889 | 4.3 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 21.0.8, 22.2.4, and 23.0.1, it is possible to trick administrators into enabling "recommended" apps for the Nextcloud server that they | 2022-10-25 20:51:00 | 2022-04-27 15:15:00 |
| CVE-2021-41241 | 4.0 | Nextcloud server is a self hosted system designed to provide cloud style services. The groupfolders application for Nextcloud allows sharing a folder with a group of people. In addition, it allows setting "advanced permissions" on subfolders, for exa | 2022-10-25 20:44:00 | 2022-03-08 19:15:00 |
| CVE-2021-28156 | 5.0 | HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10. | 2022-10-25 20:43:00 | 2021-04-20 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: