| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2011-2195 | 9.3 | A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlyi | 2021-10-29 01:07:00 | 2021-10-26 13:15:00 |
| CVE-2021-40527 | 5.0 | Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and including version 1.7.22 allows a remote attacker to access developer files stored in an AWS S3 bucket, by reading credentials store | 2021-10-28 22:18:00 | 2021-10-25 11:15:00 |
| CVE-2021-40371 | 7.5 | Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap. | 2021-10-28 22:18:00 | 2021-10-25 07:15:00 |
| CVE-2021-37363 | 9.3 | An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.exe file located in bin folder and replace with a malicious file that would connect back to an attacking computer giving system lev | 2021-10-28 22:17:00 | 2021-10-26 14:15:00 |
| CVE-2021-37364 | 9.3 | OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify permission to openclinic folders/files. A low privilege account is able to rename mysqld.exe or tomcat8.exe files located in bin folde | 2021-10-28 22:01:00 | 2021-10-26 14:15:00 |
| CVE-2021-22404 | 5.0 | There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. | 2021-10-28 20:59:00 | 2021-10-28 13:15:00 |
| CVE-2021-22405 | 5.0 | There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. | 2021-10-28 20:58:00 | 2021-10-28 13:15:00 |
| CVE-2021-41173 | 3.5 | Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when processing a maliciously crafted message from a peer. Version v1.10.9 contains patches to the vulnerab | 2021-10-28 20:55:00 | 2021-10-26 14:15:00 |
| CVE-2021-41175 | 3.5 | Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients manageme | 2021-10-28 20:45:00 | 2021-10-26 14:15:00 |
| CVE-2021-1116 | 2.1 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash. | 2021-10-28 20:42:00 | 2021-10-27 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: