| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-43530 | 4.3 | A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerabili | 2021-12-10 16:56:00 | 2021-12-08 22:15:00 |
| CVE-2021-43531 | 4.3 | When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-v | 2021-12-10 16:55:00 | 2021-12-08 22:15:00 |
| CVE-2021-43532 | 5.8 | The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the middle - the f | 2021-12-10 16:54:00 | 2021-12-08 22:15:00 |
| CVE-2021-43533 | 4.3 | When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94. | 2021-12-10 16:52:00 | 2021-12-08 22:15:00 |
| CVE-2021-41013 | 5.0 | An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs. | 2021-12-10 16:50:00 | 2021-12-08 17:15:00 |
| CVE-2021-36173 | 6.8 | A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted in | 2021-12-10 16:37:00 | 2021-12-08 19:15:00 |
| CVE-2021-25511 | 4.6 | An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability. | 2021-12-10 16:35:00 | 2021-12-08 15:15:00 |
| CVE-2021-36195 | 9.0 | Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the | 2021-12-10 15:55:00 | 2021-12-08 19:15:00 |
| CVE-2021-36189 | 4.0 | A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data | 2021-12-10 15:41:00 | 2021-12-09 09:15:00 |
| CVE-2021-43204 | 4.9 | A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of dir | 2021-12-10 15:23:00 | 2021-12-09 09:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39839
Zapisa po stranici: