| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-21532 | 5.8 | Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the de | 2022-10-24 17:15:00 | 2021-04-02 22:15:00 |
| CVE-2021-21372 | 6.8 | Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entr | 2022-10-24 17:14:00 | 2021-03-26 22:15:00 |
| CVE-2021-21403 | 7.5 | In github.com/kongchuanhujiao/server before version 1.3.21 there is an authentication Bypass by Primary Weakness vulnerability. All users are impacted. This is fixed in version 1.3.21. | 2022-10-24 17:13:00 | 2021-03-26 18:15:00 |
| CVE-2021-21437 | 4.0 | Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions | 2022-10-24 17:12:00 | 2021-03-22 09:15:00 |
| CVE-2021-21368 | 6.5 | msgpack5 is a msgpack v5 implementation for node.js and the browser. In msgpack5 before versions 3.6.1, 4.5.1, and 5.2.1 there is a "Prototype Poisoning" vulnerability. When msgpack5 decodes a map containing a key "__proto__", it assigns the decoded | 2022-10-24 17:11:00 | 2021-03-12 17:15:00 |
| CVE-2021-21378 | 6.4 | Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is conf | 2022-10-24 17:11:00 | 2021-03-11 03:15:00 |
| CVE-2021-21510 | 5.8 | Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirec | 2022-10-24 17:08:00 | 2021-03-08 22:15:00 |
| CVE-2021-21313 | 4.3 | GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at | 2022-10-24 17:07:00 | 2021-03-03 20:15:00 |
| CVE-2021-22858 | 6.5 | Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions. | 2022-10-24 17:01:00 | 2021-02-17 11:15:00 |
| CVE-2021-40390 | 7.5 | An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability. | 2022-10-24 16:43:00 | 2022-04-14 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: