| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-43857 | 6.5 | Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8. | 2022-01-07 18:16:00 | 2021-12-27 19:15:00 |
| CVE-2021-4161 | 5.0 | The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server. | 2022-01-07 18:11:00 | 2021-12-27 19:15:00 |
| CVE-2021-20166 | 5.8 | Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton. | 2022-01-07 18:01:00 | 2021-12-30 22:15:00 |
| CVE-2021-45890 | 7.5 | basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier. | 2022-01-07 17:58:00 | 2021-12-27 20:15:00 |
| CVE-2021-20165 | 6.8 | Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially bypassable as the server does | 2022-01-07 17:41:00 | 2021-12-30 22:15:00 |
| CVE-2021-20164 | 4.0 | Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page. | 2022-01-07 17:40:00 | 2021-12-30 22:15:00 |
| CVE-2021-20162 | 4.0 | Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext. | 2022-01-07 17:39:00 | 2021-12-30 22:15:00 |
| CVE-2021-20163 | 4.0 | Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext on the ftpserver.asp page. | 2022-01-07 17:38:00 | 2021-12-30 22:15:00 |
| CVE-2021-20156 | 4.0 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is possible to manually install firmware that may be malicious in nature as there does not appear to be | 2022-01-07 17:33:00 | 2021-12-30 22:15:00 |
| CVE-2021-45335 | 7.2 | Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files. | 2022-01-07 17:29:00 | 2021-12-27 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: