| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-20453 | 6.4 | IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. | 2022-05-03 16:04:00 | 2021-04-20 12:15:00 |
| CVE-2021-31256 | 4.3 | Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. | 2022-05-03 16:04:00 | 2021-04-19 19:15:00 |
| CVE-2021-31348 | 4.3 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure). | 2022-05-03 16:04:00 | 2021-04-16 18:15:00 |
| CVE-2021-28242 | 6.5 | SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cf_name" parameter when creating a new filter under the "Collections" tab. | 2022-05-03 16:04:00 | 2021-04-15 14:15:00 |
| CVE-2021-0400 | 2.1 | In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to e | 2022-05-03 16:04:00 | 2021-04-13 19:15:00 |
| CVE-2021-28973 | 4.0 | The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks. | 2022-05-03 16:04:00 | 2021-04-13 17:15:00 |
| CVE-2021-29003 | 7.5 | Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI. | 2022-05-03 16:04:00 | 2021-04-13 06:15:00 |
| CVE-2021-27522 | 6.5 | Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() function. By modifying the initial letter of the key of a user cookie, the key of the administrator cookie can be obtained. | 2022-05-03 16:04:00 | 2021-04-08 16:15:00 |
| CVE-2020-11236 | 7.8 | Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile | 2022-05-03 16:04:00 | 2021-04-07 08:15:00 |
| CVE-2020-11210 | 7.2 | Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking | 2022-05-03 16:04:00 | 2021-04-07 08:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: