| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-41034 | 6.8 | The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerable to MITM attacks that allow the replacement of the original binaries w | 2021-10-07 20:35:00 | 2021-09-29 22:15:00 |
| CVE-2021-41826 | 5.8 | PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessions_controller.rb open redirect. | 2021-10-07 20:20:00 | 2021-09-30 00:15:00 |
| CVE-2021-41845 | 4.0 | A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 through 11.0.000006. | 2021-10-07 20:08:00 | 2021-10-01 19:15:00 |
| CVE-2021-40847 | 9.3 | The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack. While the parental controls themselves are not enabled by default on the routers, | 2021-10-07 19:23:00 | 2021-09-21 18:15:00 |
| CVE-2021-41573 | 4.0 | Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or folder while the system was running version 4.3.x or earlier and then shares the link and then later deletes t | 2021-10-07 19:07:00 | 2021-09-29 18:15:00 |
| CVE-2020-24683 | 7.5 | The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not as secure as having the server validate a client app | 2021-10-07 19:05:00 | 2020-12-22 22:15:00 |
| CVE-2020-24680 | 4.6 | In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database. | 2021-10-07 19:05:00 | 2020-12-22 22:15:00 |
| CVE-2020-24679 | 10.0 | A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted. | 2021-10-07 19:05:00 | 2020-12-22 22:15:00 |
| CVE-2020-24678 | 6.5 | An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to ga | 2021-10-07 19:05:00 | 2020-12-22 22:15:00 |
| CVE-2020-24677 | 6.5 | Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data. | 2021-10-07 19:05:00 | 2020-12-22 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: