| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-24675 | 7.5 | In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process. | 2021-10-07 19:05:00 | 2020-12-22 22:15:00 |
| CVE-2020-24674 | 9.0 | In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Service (DoS) attack, execute arbitrary code, or obtain more privilege than | 2021-10-07 19:05:00 | 2020-12-22 22:15:00 |
| CVE-2020-24673 | 7.5 | In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the c | 2021-10-07 19:04:00 | 2020-12-22 22:15:00 |
| CVE-2018-11439 | 4.3 | The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file. | 2021-10-07 19:04:00 | 2018-05-30 13:29:00 |
| CVE-2021-40960 | 7.5 | Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd and /etc/shadow. | 2021-10-07 18:17:00 | 2021-10-01 14:15:00 |
| CVE-2021-41291 | 5.0 | ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device. | 2021-10-07 18:13:00 | 2021-09-30 11:15:00 |
| CVE-2021-39392 | 7.5 | The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code. | 2021-10-07 17:55:00 | 2021-09-15 17:15:00 |
| CVE-2021-1810 | 4.3 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. | 2021-10-07 17:55:00 | 2021-09-08 15:15:00 |
| CVE-2021-25737 | 4.9 | A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not p | 2021-10-07 17:55:00 | 2021-09-06 12:15:00 |
| CVE-2021-40516 | 5.0 | WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin. | 2021-10-07 17:55:00 | 2021-09-05 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: