| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-35536 | 5.5 | Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via | 2021-10-27 00:32:00 | 2021-10-20 11:16:00 |
| CVE-2021-41745 | 7.5 | ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions. | 2021-10-27 00:31:00 | 2021-10-22 12:15:00 |
| CVE-2021-0651 | 4.7 | In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interact | 2021-10-27 00:30:00 | 2021-10-22 14:15:00 |
| CVE-2021-0702 | 1.9 | In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local information disclosure with no additional execution privileges needed. User interaction is ne | 2021-10-26 23:02:00 | 2021-10-22 14:15:00 |
| CVE-2021-0703 | 7.2 | In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. | 2021-10-26 22:57:00 | 2021-10-22 14:15:00 |
| CVE-2021-0708 | 7.2 | In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed | 2021-10-26 21:35:00 | 2021-10-22 14:15:00 |
| CVE-2019-9508 | 3.5 | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time | 2021-10-26 20:19:00 | 2020-03-30 22:15:00 |
| CVE-2019-9541 | 4.3 | : Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to | 2021-10-26 20:17:00 | 2020-01-03 22:15:00 |
| CVE-2019-9530 | 4.9 | The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file fou | 2021-10-26 20:17:00 | 2019-10-10 20:15:00 |
| CVE-2020-10746 | 5.6 | A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the | 2021-10-26 20:13:00 | 2020-10-19 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: