| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-23428 | 7.5 | This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files direct | 2022-06-28 14:11:00 | 2021-09-01 15:15:00 |
| CVE-2021-27944 | 10.0 | Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do not enforce access controls, allowing an unauthenticated threat actor to access privileged functionality, leading to OS command execution. The specific a | 2022-06-28 14:11:00 | 2021-08-26 12:15:00 |
| CVE-2020-25928 | 7.5 | The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS response processing functions: dns_upcall(), getoffset(), dnc_set_answer(). The attack vector | 2022-06-28 14:11:00 | 2021-08-18 19:15:00 |
| CVE-2021-0628 | 4.6 | In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Iss | 2022-06-28 14:11:00 | 2021-08-18 15:15:00 |
| CVE-2021-0420 | 4.9 | In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS054 | 2022-06-28 14:11:00 | 2021-08-18 15:15:00 |
| CVE-2021-20772 | 4.0 | Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the title of Bulletin without the viewing privilege. | 2022-06-28 14:11:00 | 2021-08-18 06:15:00 |
| CVE-2021-20759 | 4.0 | Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege. | 2022-06-28 14:11:00 | 2021-08-18 06:15:00 |
| CVE-2021-20757 | 4.0 | Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege. | 2022-06-28 14:11:00 | 2021-08-18 06:15:00 |
| CVE-2021-0646 | 4.6 | In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process's SQL with no additional e | 2022-06-28 14:11:00 | 2021-08-17 19:15:00 |
| CVE-2020-25560 | 7.5 | In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “ | 2022-06-28 14:11:00 | 2021-08-11 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: