| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-21552 | 7.2 | Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass the restricted envir | 2022-04-26 16:05:00 | 2021-05-21 20:15:00 |
| CVE-2020-36198 | 7.2 | A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions | 2022-04-26 16:04:00 | 2021-05-13 03:15:00 |
| CVE-2021-26909 | 5.0 | Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 | 2022-04-26 16:03:00 | 2021-04-23 16:15:00 |
| CVE-2021-20991 | 9.0 | In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability. | 2022-04-26 16:03:00 | 2021-04-19 14:15:00 |
| CVE-2021-25365 | 7.2 | An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd. | 2022-04-26 16:03:00 | 2021-04-09 18:15:00 |
| CVE-2021-25357 | 2.1 | A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), and 3.6.80.7 in Android R(11.0) allows unprivileged applications to access contact information. | 2022-04-26 16:02:00 | 2021-04-09 18:15:00 |
| CVE-2021-25672 | 6.5 | A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Password Marketplace module does not properly control access. An attacker could take over accounts. | 2022-04-26 16:00:00 | 2021-03-15 17:15:00 |
| CVE-2021-25309 | 5.0 | The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote | 2022-04-26 16:00:00 | 2021-03-02 01:15:00 |
| CVE-2021-21511 | 5.5 | Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other use | 2022-04-26 15:59:00 | 2021-02-15 22:15:00 |
| CVE-2021-21305 | 7.5 | CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "#manipulate!" method inappropriately | 2022-04-26 15:59:00 | 2021-02-08 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40236
Zapisa po stranici: