| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-26753 | 6.5 | NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP POST parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to | 2022-05-03 16:04:00 | 2021-02-12 21:15:00 |
| CVE-2021-20642 | 4.3 | Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL. | 2022-05-03 16:04:00 | 2021-02-12 07:15:00 |
| CVE-2021-20637 | 4.3 | Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL. | 2022-05-03 16:04:00 | 2021-02-12 07:15:00 |
| CVE-2021-0345 | 7.2 | In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android | 2022-05-03 16:04:00 | 2021-02-04 19:15:00 |
| CVE-2021-25905 | 6.4 | An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory. | 2022-05-03 16:04:00 | 2021-01-26 18:16:00 |
| CVE-2021-20616 | 4.4 | Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. | 2022-05-03 16:04:00 | 2021-01-13 10:15:00 |
| CVE-2021-21464 | 4.3 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this i | 2022-05-03 16:04:00 | 2021-01-12 15:15:00 |
| CVE-2021-21494 | 3.5 | MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (session token) cookie, which is not set to HTTPOnly. | 2022-05-03 16:04:00 | 2021-01-04 03:15:00 |
| CVE-2020-27746 | 4.3 | Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem. | 2022-05-03 16:04:00 | 2020-11-27 18:15:00 |
| CVE-2020-27697 | 6.9 | Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink attack) which can lead to obtaining administrative pri | 2022-05-03 16:04:00 | 2020-11-18 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: