| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-0683 | 4.6 | In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne | 2021-10-08 03:29:00 | 2021-10-06 15:15:00 |
| CVE-2021-41109 | 4.3 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version 4.10.4, for regular (non-LiveQuery) queries, the session token is removed from the response, but for LiveQuery payloads it is cur | 2021-10-08 03:23:00 | 2021-09-30 15:15:00 |
| CVE-2021-24016 | 9.3 | An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened | 2021-10-08 03:22:00 | 2021-09-30 16:15:00 |
| CVE-2021-41729 | 6.4 | BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php. | 2021-10-08 03:19:00 | 2021-09-30 11:15:00 |
| CVE-2021-24017 | 4.0 | An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler. | 2021-10-08 03:12:00 | 2021-09-30 16:15:00 |
| CVE-2021-36298 | 7.5 | Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the Insig | 2021-10-08 03:10:00 | 2021-10-01 21:15:00 |
| CVE-2021-35297 | 6.8 | Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow. An attacker can use the Structured Exception Handler (SEH) records and redirect execution to attacker-cont | 2021-10-08 02:34:00 | 2021-10-01 13:15:00 |
| CVE-2021-41101 | 3.5 | wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS ` Access-Control-Allow-Origin ` header set by `nginz` is set for all subdomains of `.wire.com` (including `wire.com`). This means that | 2021-10-07 22:45:00 | 2021-09-30 20:15:00 |
| CVE-2021-41324 | 4.0 | Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal files (or Cells files belonging to any user) via the nodes parameter (for Copy and Move) or via the Path parameter | 2021-10-07 21:56:00 | 2021-09-30 21:15:00 |
| CVE-2021-38202 | 5.0 | fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd. | 2021-10-07 20:39:00 | 2021-08-08 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: