| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-31367 | 2.9 | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service (DoS) by sending genuine BGP flowspec packets | 2021-10-25 15:00:00 | 2021-10-19 19:15:00 |
| CVE-2021-41149 | 8.5 | Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets | 2021-10-25 15:00:00 | 2021-10-19 18:15:00 |
| CVE-2021-0298 | 4.0 | A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with other system events ou | 2021-10-25 14:38:00 | 2021-10-19 19:15:00 |
| CVE-2021-31350 | 9.0 | An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operatio | 2021-10-25 12:58:00 | 2021-10-19 19:15:00 |
| CVE-2021-0296 | 5.8 | The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers to indicate that content from the requested domain will only be served over HTTPS. The lack of HSTS m | 2021-10-25 12:29:00 | 2021-10-19 19:15:00 |
| CVE-2021-32663 | 5.0 | iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This issue has been resolved in versions 2.6.5 and 2.7.5 | 2021-10-22 20:49:00 | 2021-10-19 18:15:00 |
| CVE-2021-32664 | 3.5 | Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on "run query" page when logged as administrator. This has been resolved in versions 2.6.5 and 2.7.5. | 2021-10-22 20:45:00 | 2021-10-19 18:15:00 |
| CVE-2021-41131 | 8.8 | python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vulnerability that in the worst case can overwrite files ending in `.json` anywhere on the cli | 2021-10-22 20:44:00 | 2021-10-19 18:15:00 |
| CVE-2021-3746 | 7.1 | A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is wr | 2021-10-22 20:28:00 | 2021-10-19 15:15:00 |
| CVE-2021-39355 | 3.5 | The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/indeed-job-importer/trunk/indeed-job-importer.php file which allowed att | 2021-10-22 20:24:00 | 2021-10-19 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: