| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-41300 | 5.0 | ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality. | 2021-10-07 14:34:00 | 2021-09-30 11:15:00 |
| CVE-2021-41301 | 10.0 | ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthenticated attacker to remotely disclose sensitive information and help her | 2021-10-07 14:19:00 | 2021-09-30 11:15:00 |
| CVE-2021-37786 | 2.1 | Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Ce | 2021-10-07 14:19:00 | 2021-09-27 14:15:00 |
| CVE-2021-41104 | 4.3 | ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which `web_server` allows over-the-air (OTA) updates without checking user defin | 2021-10-07 14:13:00 | 2021-09-28 16:15:00 |
| CVE-2021-25959 | 4.3 | In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instan | 2021-10-07 13:21:00 | 2021-09-29 14:15:00 |
| CVE-2020-16630 | 4.3 | TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key created by Passkey Entry, Numeric Comparison or OOB. | 2021-10-07 13:13:00 | 2021-09-20 20:15:00 |
| CVE-2021-36297 | 4.4 | SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSI | 2021-10-07 12:56:00 | 2021-09-28 20:15:00 |
| CVE-2021-37273 | 7.8 | A Denial of Service issue exists in China Telecom Corporation EPON Tianyi Gateway ZXHN F450(EPON ONU) 3.0. Tianyi Gateway is a hardware terminal of "Optical Modem Smart Router." Attackers can use this vulnerability to restart the device multiple time | 2021-10-07 12:42:00 | 2021-09-28 18:15:00 |
| CVE-2021-25963 | 4.3 | In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting (XSS) that allows execution of arbitrary javascript code on a victim browser. This vulnerability exists due to the error page contents not escaped. | 2021-10-07 03:02:00 | 2021-09-30 08:15:00 |
| CVE-2021-41323 | 4.0 | Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter. | 2021-10-07 03:00:00 | 2021-09-30 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: