| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-33728 | 9.0 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserialization of user-supplied content by the affected sof | 2021-10-18 14:41:00 | 2021-10-12 10:15:00 |
| CVE-2021-33727 | 4.0 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidential information of any user in the affected system | 2021-10-18 14:29:00 | 2021-10-12 10:15:00 |
| CVE-2021-33726 | 5.0 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user controlled path and does not correctly check if the relative path is still within the intended ta | 2021-10-18 14:28:00 | 2021-10-12 10:15:00 |
| CVE-2021-33725 | 5.0 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within th | 2021-10-18 14:15:00 | 2021-10-12 10:15:00 |
| CVE-2021-33724 | 5.0 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path. | 2021-10-18 13:53:00 | 2021-10-12 10:15:00 |
| CVE-2021-40191 | 3.5 | Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/ | 2021-10-18 13:50:00 | 2021-10-11 14:15:00 |
| CVE-2021-33722 | 4.0 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Traversal vulnerability when exporting a firmware container. With this a privileged authenticated attacker could create arbitrary file | 2021-10-18 13:41:00 | 2021-10-12 10:15:00 |
| CVE-2021-40543 | 7.5 | Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $_GET['usrid'] and $_GET['prof_id'] in the PasswordCheck.php file. | 2021-10-18 12:54:00 | 2021-10-11 13:15:00 |
| CVE-2012-2666 | 7.5 | golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and executes it as shell script. | 2021-10-18 12:54:00 | 2021-07-09 11:15:00 |
| CVE-2020-27874 | 6.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil | 2021-10-18 12:53:00 | 2021-02-10 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: