| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-20151 | 7.5 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an att | 2022-01-07 16:20:00 | 2021-12-30 22:15:00 |
| CVE-2021-20149 | 7.5 | Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing access to services on the device only apply to IPv4. All services running on the devices are accessi | 2022-01-07 16:10:00 | 2021-12-30 22:15:00 |
| CVE-2021-20318 | 6.5 | The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage. | 2022-01-07 16:02:00 | 2021-12-23 20:15:00 |
| CVE-2017-2488 | 5.0 | A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able t | 2022-01-07 15:44:00 | 2021-12-23 20:15:00 |
| CVE-2021-4139 | 6.0 | pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2022-01-07 15:14:00 | 2021-12-21 13:15:00 |
| CVE-2020-20945 | 6.8 | A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts. | 2022-01-07 15:10:00 | 2021-12-27 21:15:00 |
| CVE-2020-20948 | 5.0 | An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. | 2022-01-07 14:51:00 | 2021-12-27 21:15:00 |
| CVE-2021-35035 | 4.0 | A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file. | 2022-01-07 14:40:00 | 2021-12-29 13:15:00 |
| CVE-2021-45895 | 4.3 | Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface. | 2022-01-07 14:30:00 | 2021-12-27 21:15:00 |
| CVE-2021-35034 | 6.4 | An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted. | 2022-01-07 14:19:00 | 2021-12-29 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: