| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-20630 | 4.0 | Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors. | 2022-06-28 14:11:00 | 2021-03-18 01:15:00 |
| CVE-2021-23356 | 7.5 | This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in | 2022-06-28 14:11:00 | 2021-03-15 17:15:00 |
| CVE-2021-23355 | 7.5 | This affects all versions of package ps-kill. If (attacker-controlled) user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitiz | 2022-06-28 14:11:00 | 2021-03-15 17:15:00 |
| CVE-2021-3167 | 4.0 | In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs. | 2022-06-28 14:11:00 | 2021-03-15 16:15:00 |
| CVE-2021-28374 | 5.0 | The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some conf | 2022-06-28 14:11:00 | 2021-03-15 05:15:00 |
| CVE-2021-28143 | 7.7 | /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools). | 2022-06-28 14:11:00 | 2021-03-11 22:15:00 |
| CVE-2021-28144 | 9.0 | prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely. | 2022-06-28 14:11:00 | 2021-03-11 17:15:00 |
| CVE-2021-0460 | 2.1 | In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product | 2022-06-28 14:11:00 | 2021-03-10 17:15:00 |
| CVE-2021-20670 | 5.0 | Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors. | 2022-06-28 14:11:00 | 2021-03-10 10:15:00 |
| CVE-2021-26970 | 6.5 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to | 2022-06-28 14:11:00 | 2021-03-05 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: