| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-46371 | 5.0 | antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information. | 2022-07-12 17:42:00 | 2022-02-14 16:15:00 |
| CVE-2021-46366 | 6.8 | An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials. | 2022-07-12 17:42:00 | 2022-02-11 21:15:00 |
| CVE-2021-39662 | 7.2 | In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider collections due to a missing permission check. This could lead to local escalation of privilege with User execution privileges neede | 2022-07-12 17:42:00 | 2022-02-11 18:15:00 |
| CVE-2021-39619 | 7.2 | In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privilege | 2022-07-12 17:42:00 | 2022-02-11 18:15:00 |
| CVE-2021-31932 | 7.5 | Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding | 2022-07-12 17:42:00 | 2022-02-11 18:15:00 |
| CVE-2021-23597 | 5.0 | This affects the package fastify-multipart before 5.3.1. By providing a name=constructor property it is still possible to crash the application. **Note:** This is a bypass of CVE-2020-8136 (https://security.snyk.io/vuln/SNYK-JS-FASTIFYMULTIPART-12903 | 2022-07-12 17:42:00 | 2022-02-11 17:15:00 |
| CVE-2021-40044 | 5.8 | There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations. | 2022-07-12 17:42:00 | 2022-02-09 23:15:00 |
| CVE-2021-39994 | 7.5 | There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. | 2022-07-12 17:42:00 | 2022-02-09 23:15:00 |
| CVE-2021-39991 | 2.1 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality. | 2022-07-12 17:42:00 | 2022-02-09 23:15:00 |
| CVE-2021-39986 | 2.1 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality. | 2022-07-12 17:42:00 | 2022-02-09 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: