| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-23447 | 4.3 | This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string). | 2022-05-03 16:04:00 | 2021-10-07 17:15:00 |
| CVE-2021-29758 | 4.0 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169. | 2022-05-03 16:04:00 | 2021-10-06 17:15:00 |
| CVE-2021-39889 | 4.0 | In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch. | 2022-05-03 16:04:00 | 2021-10-05 14:15:00 |
| CVE-2021-37777 | 5.0 | Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information di | 2022-05-03 16:04:00 | 2021-10-04 14:15:00 |
| CVE-2021-37106 | 9.0 | There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the s | 2022-05-03 16:04:00 | 2021-09-28 15:15:00 |
| CVE-2021-23243 | 4.6 | In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used. | 2022-05-03 16:04:00 | 2021-09-27 13:15:00 |
| CVE-2021-23443 | 5.8 | This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if {{ }} are used. | 2022-05-03 16:04:00 | 2021-09-21 17:15:00 |
| CVE-2021-32282 | 4.3 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_add_check() located in gravity_ircode.c. It allows an attacker to cause Denial of Service. | 2022-05-03 16:04:00 | 2021-09-20 16:15:00 |
| CVE-2021-29773 | 5.5 | IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 202865. | 2022-05-03 16:04:00 | 2021-09-15 18:15:00 |
| CVE-2021-37101 | 7.2 | There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an attakcer can exploit this vulnerability by physical accessing the device and implant malicious | 2022-05-03 16:04:00 | 2021-09-09 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: