| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-8920 | 2.7 | An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing a | 2021-10-07 17:08:00 | 2020-12-10 11:15:00 |
| CVE-2020-10517 | 4.0 | An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not all | 2021-10-07 17:07:00 | 2020-08-27 22:15:00 |
| CVE-2021-25961 | 6.0 | In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with | 2021-10-07 17:05:00 | 2021-09-29 14:15:00 |
| CVE-2021-41295 | 6.8 | ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the syst | 2021-10-07 16:50:00 | 2021-09-30 11:15:00 |
| CVE-2021-25960 | 6.0 | In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability (Formula Injection). A low privileged attacker can use accounts module to inject payloads in the input fields. When an ad | 2021-10-07 16:49:00 | 2021-09-29 14:15:00 |
| CVE-2021-41294 | 6.4 | ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scen | 2021-10-07 16:47:00 | 2021-09-30 11:15:00 |
| CVE-2021-41293 | 5.0 | ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST parameter, unauthenticated attackers can remotely disclose arbitrary files on the affected device and disclose sensitive and | 2021-10-07 16:46:00 | 2021-09-30 11:15:00 |
| CVE-2021-34413 | 6.0 | All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious ap | 2021-10-07 16:35:00 | 2021-09-27 14:15:00 |
| CVE-2021-41296 | 5.0 | ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system. | 2021-10-07 16:29:00 | 2021-09-30 11:15:00 |
| CVE-2021-41298 | 6.5 | ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability, attackers with general user's privilege can remo | 2021-10-07 16:25:00 | 2021-09-30 11:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: