| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-37708 | 7.5 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding securit | 2022-10-25 16:06:00 | 2021-08-16 20:15:00 |
| CVE-2021-21830 | 7.5 | A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this | 2022-10-25 16:04:00 | 2021-08-13 19:15:00 |
| CVE-2021-21829 | 7.5 | A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malici | 2022-10-25 16:04:00 | 2021-08-13 19:15:00 |
| CVE-2021-37652 | 4.6 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesCreateEnsemble` can result in a use after free error if an attacker supplies specially crafted arguments. The [ | 2022-10-25 16:03:00 | 2021-08-12 22:15:00 |
| CVE-2021-21564 | 7.5 | Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or perform unauthorized actions by sending | 2022-10-25 16:03:00 | 2021-08-09 21:15:00 |
| CVE-2021-25954 | 4.0 | In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an administrator has rights to do, the affected field | 2022-10-25 16:02:00 | 2021-08-09 17:15:00 |
| CVE-2021-22910 | 7.5 | A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE. | 2022-10-25 16:02:00 | 2021-08-09 13:15:00 |
| CVE-2021-24500 | 5.8 | Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated. This allows an attacker to trick a logged in user to submit a POST req | 2022-10-25 16:02:00 | 2021-08-09 10:15:00 |
| CVE-2021-34629 | 4.0 | The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, | 2022-10-25 16:02:00 | 2021-07-30 21:15:00 |
| CVE-2021-21798 | 6.8 | An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a stack variable to go out of scope, resulting in the application dereferencing a stale poi | 2022-10-25 16:01:00 | 2021-09-15 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: