| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-41127 | 5.8 | Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functionality that loads a trained model `tar.gz` file which allows a malicious actor to craft a `mod | 2021-10-27 15:47:00 | 2021-10-21 21:15:00 |
| CVE-2021-41169 | 3.5 | Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attacks. HTML input into Tag names is not properly sanitized. Only admin users are allowed to cr | 2021-10-27 15:41:00 | 2021-10-21 21:15:00 |
| CVE-2021-38485 | 6.5 | The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk. | 2021-10-27 15:23:00 | 2021-10-22 14:15:00 |
| CVE-2021-39221 | 3.5 | Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Contacts application prior to version 4.0.3 was vulnerable to a stored Cross-Site Scripting (XSS) vulnerability. For exploitation, a user would need to right-click on a mal | 2021-10-27 15:09:00 | 2021-10-25 19:15:00 |
| CVE-2021-38451 | 3.5 | The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify | 2021-10-27 15:06:00 | 2021-10-22 12:15:00 |
| CVE-2021-42108 | 4.6 | Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker | 2021-10-27 14:33:00 | 2021-10-21 08:15:00 |
| CVE-2021-42107 | 4.6 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Pleas | 2021-10-27 14:28:00 | 2021-10-21 08:15:00 |
| CVE-2021-30359 | 7.2 | The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer | 2021-10-27 14:21:00 | 2021-10-22 14:15:00 |
| CVE-2021-42106 | 4.6 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Pleas | 2021-10-27 14:18:00 | 2021-10-21 08:15:00 |
| CVE-2021-38479 | 5.0 | Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer. | 2021-10-27 14:17:00 | 2021-10-22 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: