| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-7281 | 6.8 | Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website. | 2022-10-25 15:35:00 | 2019-07-01 19:15:00 |
| CVE-2021-31356 | 7.2 | A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of | 2022-10-25 15:33:00 | 2021-10-19 19:15:00 |
| CVE-2021-32726 | 7.5 | Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reused an earlier used username, the previous user could | 2022-10-25 15:33:00 | 2021-07-12 20:15:00 |
| CVE-2021-31349 | 7.5 | The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to view internal files, change settings, manipulate services and execute arbitrary code. This issue affects all Juniper Networks 128 T | 2022-10-25 15:32:00 | 2021-10-19 19:15:00 |
| CVE-2021-24752 | 3.5 | Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top Wo | 2022-10-25 15:32:00 | 2021-10-18 14:15:00 |
| CVE-2021-38161 | 6.8 | Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8. | 2022-10-25 15:30:00 | 2021-11-03 16:15:00 |
| CVE-2019-7666 | 6.5 | Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password. | 2022-10-25 15:29:00 | 2019-07-01 19:15:00 |
| CVE-2021-38442 | 6.8 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition. An attacker could leverage this vulnerability to execute code in the co | 2022-10-25 15:28:00 | 2021-10-18 13:15:00 |
| CVE-2021-38436 | 6.8 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition. An attacker could leverage this vulnerability to execute arbitrary co | 2022-10-25 15:28:00 | 2021-10-18 13:15:00 |
| CVE-2021-38460 | 5.0 | A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries. | 2022-10-25 15:27:00 | 2021-10-12 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: