| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-40854 | 4.6 | AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged Notepad process that can launch other applications. | 2021-10-20 18:46:00 | 2021-10-14 05:15:00 |
| CVE-2021-33179 | 4.3 | The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload. | 2021-10-20 18:32:00 | 2021-10-14 15:15:00 |
| CVE-2021-26318 | 1.9 | A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information. | 2021-10-20 18:29:00 | 2021-10-13 19:15:00 |
| CVE-2021-33177 | 6.5 | The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the malicious actor to be authenticated to the vulnerable system, but once authenticated they would be able to execute arb | 2021-10-20 18:19:00 | 2021-10-14 15:15:00 |
| CVE-2021-41142 | 3.5 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerability in Tuleap Community Edition prior to 12.11.99.25 and Tuleap Enterprise Edition 12.11-2. | 2021-10-20 18:07:00 | 2021-10-14 16:15:00 |
| CVE-2021-22964 | 6.8 | A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash `//` followed by a domain: `http://localhost:3000//a//youtube.com/ | 2021-10-20 18:02:00 | 2021-10-14 15:15:00 |
| CVE-2021-22963 | 5.8 | A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the f | 2021-10-20 17:43:00 | 2021-10-14 15:15:00 |
| CVE-2021-42342 | 7.5 | An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerabl | 2021-10-20 17:35:00 | 2021-10-14 06:15:00 |
| CVE-2021-42329 | 3.5 | The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks. | 2021-10-20 17:26:00 | 2021-10-15 12:15:00 |
| CVE-2021-40999 | 6.5 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x p | 2021-10-20 17:25:00 | 2021-10-15 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: