| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-32779 | 7.5 | Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy incorrectly handled a URI '#fragment' element as part of the path element. Envoy is configured with an RBAC fi | 2022-10-25 15:56:00 | 2021-08-24 21:15:00 |
| CVE-2021-32829 | 6.5 | ZStack is open source IaaS(infrastructure as a service) software aiming to automate datacenters, managing resources of compute, storage, and networking all by APIs. Affected versions of ZStack REST API are vulnerable to post-authentication Remote Cod | 2022-10-25 15:55:00 | 2021-08-17 16:15:00 |
| CVE-2021-21964 | 7.1 | A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of service. An attacker can send a malicious packet to trigger | 2022-10-25 15:54:00 | 2022-02-04 23:15:00 |
| CVE-2021-32770 | 5.0 | Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks .htaccess HTTP Basic Authentication variables into the app.js bundle during build-time. Users who are not initializing basic authe | 2022-10-25 15:47:00 | 2021-07-15 19:15:00 |
| CVE-2021-32658 | 2.1 | Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End | 2022-10-25 15:47:00 | 2021-06-08 19:15:00 |
| CVE-2021-32656 | 5.0 | Nextcloud Server is a Nextcloud package that handles data storage. A vulnerability in federated share exists in versions prior to 19.0.11, 20.0.10, and 21.0.2. An attacker can gain access to basic information about users of a server by accessing a pu | 2022-10-25 15:47:00 | 2021-06-01 22:15:00 |
| CVE-2021-21304 | 7.5 | Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used thro | 2022-10-25 15:44:00 | 2021-02-08 18:15:00 |
| CVE-2019-7280 | 4.0 | Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication. | 2022-10-25 15:42:00 | 2019-07-01 19:15:00 |
| CVE-2021-32731 | 5.0 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Between (and including) versions 13.1RC1 and 13.1, the reset password form reveals the email address of users just by giving their username. The | 2022-10-25 15:41:00 | 2021-07-01 19:15:00 |
| CVE-2019-7671 | 3.5 | Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user’s browser session in context of an affected sit | 2022-10-25 15:39:00 | 2019-06-05 19:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: