Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-25399 3.6 Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege. 2022-10-25 18:35:00
CVE-2021-25397 2.1 An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications. 2022-10-25 18:33:00
CVE-2021-22149 6.5 Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated attacker could utilize API keys belonging to higher pr 2022-10-25 18:30:00
CVE-2021-3706 5.0 adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag 2022-10-25 18:30:00
CVE-2021-25384 7.5 An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. 2022-10-25 18:25:00
CVE-2021-25382 3.6 An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command. 2022-10-25 18:24:00
CVE-2021-25364 2.1 A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information. 2022-10-25 18:22:00
CVE-2021-25338 3.6 Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region. 2022-10-25 18:20:00
CVE-2021-24620 6.8 The WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin through 2.2.5 does not check for the uploaded Downloadable Digital product file, allowing any file, such as PHP to be uploaded by an administrator. Furthermore, 2022-10-25 18:13:00
CVE-2021-25320 4.0 A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks T 2022-10-25 18:09:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: