| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-20501 | 6.4 | IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary ne | 2022-07-12 17:42:00 | 2021-04-21 12:15:00 |
| CVE-2021-30487 | 4.0 | In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation. | 2022-07-12 17:42:00 | 2021-04-15 00:15:00 |
| CVE-2021-30479 | 5.0 | An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of | 2022-07-12 17:42:00 | 2021-04-15 00:15:00 |
| CVE-2021-30478 | 4.0 | An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the can_forge_sender permission (previously is_api_super_user) resulted in users with this permission being able to send messages appearing as if sent by a system bot, | 2022-07-12 17:42:00 | 2021-04-15 00:15:00 |
| CVE-2021-30477 | 4.0 | An issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to messages sent by outgoing webhooks to private streams meant that an outgoing webhook bot could be used to send messages to private streams that the user was | 2022-07-12 17:42:00 | 2021-04-15 00:15:00 |
| CVE-2021-21485 | 4.3 | An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged user. | 2022-07-12 17:42:00 | 2021-04-13 19:15:00 |
| CVE-2021-0468 | 4.4 | In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interacti | 2022-07-12 17:42:00 | 2021-04-13 19:15:00 |
| CVE-2021-0445 | 4.6 | In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: | 2022-07-12 17:42:00 | 2021-04-13 19:15:00 |
| CVE-2021-0428 | 2.1 | In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not n | 2022-07-12 17:42:00 | 2021-04-13 19:15:00 |
| CVE-2021-21730 | 5.0 | A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0_TY.T6 | 2022-07-12 17:42:00 | 2021-04-13 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: