İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2021: sömürülen ve yeni ciddi CVE kayıtları

95 kayıt · 18 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2021-28918
    41Planlayın

    Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indete

    KritikCVSS 9,1Kavram kanıtıEPSS %16

    netmask project · netmask1 Nis 2021

  • CVE-2021-20235
    45Planlayın

    There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp.

    YüksekCVSS 8,1İstismar yokEPSS %43

    zeromq · libzmq1 Nis 2021

  • CVE-2021-28164
    60Bu hafta

    In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segm

    OrtaCVSS 5,3SilahlaştırılmışEPSS %82

    eclipse · jetty1 Nis 2021

  • CVE-2021-28165
    46Planlayın

    In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large inva

    YüksekCVSS 7,5Kavram kanıtıEPSS %53

    eclipse · jetty1 Nis 2021

  • CVE-2021-20078
    54Planlayın

    Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spar

    KritikCVSS 9,1İstismar yokEPSS %60

    zohocorp · manageengine opmanager1 Nis 2021

  • CVE-2021-26072
    29İzleyin

    The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the c

    OrtaCVSS 4,3Kavram kanıtıEPSS %38

    atlassian · confluence data center1 Nis 2021

  • CVE-2021-28113
    33İzleyin

    A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (wi

    OrtaCVSS 6,7İstismar yokEPSS %22

    okta · access gateway2 Nis 2021

  • CVE-2021-1782
    59Planlayın

    A race condition was addressed with improved locking.

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %2

    apple · ipados2 Nis 2021

  • CVE-2021-1789
    69Bu hafta

    A type confusion issue was addressed with improved state handling.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %13

    apple · ipados2 Nis 2021

  • CVE-2021-1870
    71Bu hafta

    A logic issue was addressed with improved restrictions.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %7

    apple · ipados2 Nis 2021

  • CVE-2021-1871
    71Bu hafta

    A logic issue was addressed with improved restrictions.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %7

    apple · ipados2 Nis 2021

  • CVE-2021-1879
    60Bu hafta

    This issue was addressed by improved management of object lifetimes.

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %7

    apple · ipados2 Nis 2021

  • CVE-2021-27973
    31İzleyin

    SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.

    YüksekCVSS 7,2Kavram kanıtıEPSS %11

    piwigo · piwigo2 Nis 2021

  • CVE-2021-3374
    25İzleyin

    Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    rstudio · shiny server2 Nis 2021

  • CVE-2020-27600
    43Planlayın

    HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary comma

    KritikCVSS 9,8İstismar yokEPSS %13

    dlink · dir-846 firmware2 Nis 2021

  • CVE-2021-24155
    53Planlayın

    Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

    YüksekCVSS 7,2SilahlaştırılmışEPSS %84

    backup-guard · backup guard5 Nis 2021

  • CVE-2021-24169
    27İzleyin

    Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %10

    algolplus · advanced order export for woocommerce5 Nis 2021

  • CVE-2021-24175
    43Planlayın

    The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    posimyth · the plus addons for elementor5 Nis 2021

  • CVE-2021-24209
    36İzleyin

    WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)

    YüksekCVSS 7,2İstismar yokEPSS %27

    automattic · wp super cache5 Nis 2021

  • CVE-2020-17453
    32İzleyin

    WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %26

    wso2 · api manager5 Nis 2021

  • CVE-2021-30149
    42Planlayın

    Composr 10.0.36 allows upload and execution of PHP files.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    ocproducts · composr6 Nis 2021

  • CVE-2021-26709
    51Planlayın

    D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to

    KritikCVSS 9,8İstismar yokEPSS %40

    d-link · dsl-320b-d17 Nis 2021

  • CVE-2021-21425
    63Bu hafta

    Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

    KritikCVSS 9,8SilahlaştırılmışEPSS %80

    getgrav · grav-plugin-admin7 Nis 2021

  • CVE-2021-1472
    61Bu hafta

    Cisco Small Business RV Series Routers Vulnerabilities

    KritikCVSS 9,8SilahlaştırılmışEPSS %72

    cisco · rv160 firmware8 Nis 2021

  • CVE-2021-1473
    60Bu hafta

    Cisco Small Business RV Series Routers Vulnerabilities

    KritikCVSS 9,8SilahlaştırılmışEPSS %64

    cisco · rv340 firmware8 Nis 2021

  • CVE-2021-28924
    27İzleyin

    Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.

    OrtaCVSS 6,1İstismar yokEPSS %10

    nagios · network analyzer8 Nis 2021

  • CVE-2021-20021
    96Hemen

    A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %88

    sonicwall · email security9 Nis 2021

  • CVE-2021-20080
    52Planlayın

    Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 al

    OrtaCVSS 6,1İstismar yokEPSS %93

    zohocorp · manageengine servicedesk plus9 Nis 2021

  • CVE-2021-20022
    63Bu hafta

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %16

    sonicwall · email security9 Nis 2021

  • CVE-2021-29003
    53Planlayın

    Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_vali

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    genexis · platinum 4410 firmware13 Nis 2021

  • CVE-2021-27905
    67Bu hafta

    SSRF vulnerability with the Replication handler

    KritikCVSS 9,8Kavram kanıtıEPSS %93

    apache · solr13 Nis 2021

  • CVE-2021-29425
    22İzleyin

    Possible limited path traversal vulnerabily in Apache Commons IO

    OrtaCVSS 4,8Kavram kanıtıEPSS %10

    apache · commons io13 Nis 2021

  • CVE-2021-30176
    48Planlayın

    The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.

    KritikCVSS 9,8İstismar yokEPSS %29

    zerof · expert13 Nis 2021

  • CVE-2020-13568
    44Planlayın

    SQL injection vulnerability exists in phpGACL 3.3.7.

    YüksekCVSS 8,8İstismar yokEPSS %29

    open-emr · openemr13 Nis 2021

  • CVE-2021-22717
    47Planlayın

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and

    YüksekCVSS 8,8İstismar yokEPSS %38

    schneider-electric · c-bus toolkit13 Nis 2021

  • CVE-2021-22718
    39İzleyin

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and

    YüksekCVSS 7,8İstismar yokEPSS %27

    schneider-electric · c-bus toolkit13 Nis 2021

  • CVE-2021-22719
    47Planlayın

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and

    YüksekCVSS 8,8İstismar yokEPSS %40

    schneider-electric · c-bus toolkit13 Nis 2021

  • CVE-2021-22720
    37İzleyin

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and

    YüksekCVSS 7,2İstismar yokEPSS %30

    schneider-electric · c-bus toolkit13 Nis 2021

  • CVE-2021-23279
    48Planlayın

    Arbitrary File delete

    KritikCVSS 10,0İstismar yokEPSS %27

    eaton · intelligent power manager13 Nis 2021

  • CVE-2021-28310
    64Bu hafta

    Win32k Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %8

    microsoft · windows 10 180313 Nis 2021

  • CVE-2021-28325
    45Planlayın

    Windows SMB Information Disclosure Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %62

    microsoft · windows 1013 Nis 2021

  • CVE-2021-28472
    50Planlayın

    Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %61

    microsoft · vscode-maven13 Nis 2021

  • CVE-2021-28480
    60Bu hafta

    Microsoft Exchange Server Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %71

    microsoft · exchange server13 Nis 2021

  • CVE-2021-28481
    50Planlayın

    Microsoft Exchange Server Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    microsoft · exchange server13 Nis 2021

  • CVE-2021-28482
    60Bu hafta

    Microsoft Exchange Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %83

    microsoft · exchange server13 Nis 2021

  • CVE-2021-29440
    37İzleyin

    Twig allowing dangerous PHP functions by default

    YüksekCVSS 7,2Kavram kanıtıEPSS %29

    getgrav · grav13 Nis 2021

  • CVE-2021-26812
    53Planlayın

    Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module.

    OrtaCVSS 6,1Kavram kanıtıEPSS %97

    jitsi · meet14 Nis 2021

  • CVE-2021-27114
    46Planlayın

    An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices.

    KritikCVSS 9,8İstismar yokEPSS %24

    dlink · dir-816 firmware14 Nis 2021

  • CVE-2021-27250
    46Planlayın

    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc0

    OrtaCVSS 6,5İstismar yokEPSS %67

    dlink · dap-2020 firmware14 Nis 2021

  • CVE-2021-26030
    49Planlayın

    [20210401] - Core - Escape xss in logo parameter error pages

    OrtaCVSS 6,1İstismar yokEPSS %82

    joomla · joomla\!14 Nis 2021

  • CVE-2021-3017
    49Planlayın

    The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    intelbras · win 300 firmware14 Nis 2021

  • CVE-2021-29449
    40Planlayın

    Multiple Privilege Escalation Vulnerabilities Pihole

    YüksekCVSS 7,8SilahlaştırılmışEPSS %1

    pi-hole · pi-hole14 Nis 2021

  • CVE-2021-27850
    67Bu hafta

    Bypass of the fix for CVE-2019-0195

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    apache · tapestry15 Nis 2021

  • CVE-2021-21087
    32İzleyin

    ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser

    OrtaCVSS 5,4Kavram kanıtıEPSS %37

    adobe · coldfusion15 Nis 2021

  • CVE-2021-29447
    52Planlayın

    WordPress Authenticated XXE attack when installation is running PHP 8

    OrtaCVSS 6,5Kavram kanıtıEPSS %85

    wordpress · wordpress15 Nis 2021

  • CVE-2021-27691
    47Planlayın

    Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with

    KritikCVSS 9,8İstismar yokEPSS %25

    tendacn · g0 firmware15 Nis 2021

  • CVE-2020-2509
    79Bu hafta

    Command Injection Vulnerability in QTS and QuTS hero

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %33

    qnap · qts17 Nis 2021

  • CVE-2021-3493
    76Bu hafta

    The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %49

    canonical · ubuntu linux17 Nis 2021

  • CVE-2021-27030
    49Planlayın

    A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s

    YüksekCVSS 7,8İstismar yokEPSS %59

    autodesk · fbx review19 Nis 2021

  • CVE-2021-25681
    33İzleyin

    AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    adtran · personal phone manager20 Nis 2021

  • CVE-2021-20023
    65Bu hafta

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on th

    OrtaCVSS 4,9KEVSilahlaştırılmışEPSS %51

    sonicwall · email security20 Nis 2021

  • CVE-2020-35313
    53Planlayın

    A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows rem

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    wondercms · wondercms20 Nis 2021

  • CVE-2020-35314
    47Planlayın

    A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attacker

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    wondercms · wondercms20 Nis 2021

  • CVE-2021-21642
    43Planlayın

    Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

    YüksekCVSS 8,1İstismar yokEPSS %37

    jenkins · config file provider21 Nis 2021

  • CVE-2021-3287
    60Bu hafta

    Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization clas

    KritikCVSS 9,8SilahlaştırılmışEPSS %51

    zohocorp · manageengine opmanager22 Nis 2021

  • CVE-2021-2189
    34İzleyin

    Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template).

    YüksekCVSS 7,5İstismar yokEPSS %14

    oracle · sales offline22 Nis 2021

  • CVE-2021-2190
    58Planlayın

    Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template).

    YüksekCVSS 7,5İstismar yokEPSS %92

    oracle · sales offline22 Nis 2021

  • CVE-2021-2198
    56Planlayın

    Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin).

    YüksekCVSS 8,2İstismar yokEPSS %79

    oracle · knowledge management22 Nis 2021

  • CVE-2021-2289
    37İzleyin

    Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Template, GTIN search).

    YüksekCVSS 8,1İstismar yokEPSS %15

    oracle · product hub22 Nis 2021

  • CVE-2021-31403
    10İzleyin

    Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8

    DüşükCVSS 2,5İstismar yokEPSS %0

    vaadin · vaadin23 Nis 2021

  • CVE-2021-22893
    84Hemen

    Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browse

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %47

    ivanti · connect secure23 Nis 2021

  • CVE-2021-22204
    91Hemen

    Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing t

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %99

    exiftool project · exiftool23 Nis 2021

  • CVE-2021-22205
    100Hemen

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    gitlab · gitlab23 Nis 2021

  • CVE-2021-25899
    34İzleyin

    An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    void · aurall rec monitor23 Nis 2021

  • CVE-2021-31761
    48Planlayın

    Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process featur

    KritikCVSS 9,6Kavram kanıtıEPSS %33

    webmin · webmin25 Nis 2021

  • CVE-2021-31802
    40Planlayın

    NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %14

    netgear · r7000 firmware26 Nis 2021

  • CVE-2021-21206
    68Bu hafta

    Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a craft

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %9

    google · chrome26 Nis 2021

  • CVE-2021-21215
    36İzleyin

    Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted

    OrtaCVSS 6,5İstismar yokEPSS %34

    google · chrome26 Nis 2021

  • CVE-2021-21216
    33İzleyin

    Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted

    OrtaCVSS 6,5İstismar yokEPSS %21

    google · chrome26 Nis 2021

  • CVE-2021-21220
    86Hemen

    Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit he

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %70

    google · chrome26 Nis 2021

  • CVE-2021-21224
    90Hemen

    Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a craft

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %84

    google · chrome26 Nis 2021

  • CVE-2021-28125
    43Planlayın

    Apache Superset Open Redirect

    OrtaCVSS 6,1İstismar yokEPSS %64

    apache · superset27 Nis 2021

  • CVE-2021-29200
    56Planlayın

    RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

    KritikCVSS 9,8Kavram kanıtıEPSS %55

    apache · ofbiz27 Nis 2021

  • CVE-2021-30128
    63Bu hafta

    Unsafe deserialization in Apache OFBiz

    KritikCVSS 9,8Kavram kanıtıEPSS %81

    apache · ofbiz27 Nis 2021

  • CVE-2021-29441
    64Bu hafta

    Authentication bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %83

    alibaba · nacos27 Nis 2021

  • CVE-2021-29442
    50Planlayın

    Authentication bypass

    YüksekCVSS 7,5Kavram kanıtıEPSS %65

    alibaba · nacos27 Nis 2021

  • CVE-2021-31856
    62Bu hafta

    A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experime

    KritikCVSS 9,8Kavram kanıtıEPSS %75

    layer5 · meshery28 Nis 2021

  • CVE-2021-27933
    32İzleyin

    pfSense 2.5.0 allows XSS via the services_wol_edit.php Description field.

    OrtaCVSS 6,1İstismar yokEPSS %26

    pfsense · pfsense28 Nis 2021

  • CVE-2021-25151
    39İzleyin

    A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1.

    YüksekCVSS 8,8İstismar yokEPSS %11

    arubanetworks · airwave28 Nis 2021

  • CVE-2021-25215
    33İzleyin

    An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

    YüksekCVSS 7,5İstismar yokEPSS %11

    debian · debian linux28 Nis 2021

  • CVE-2021-25216
    64Bu hafta

    A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

    KritikCVSS 9,8İstismar yokEPSS %82

    debian · debian linux28 Nis 2021

  • CVE-2021-20090
    99Hemen

    A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <=

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    buffalo · wsr-2533dhpl2-bk firmware29 Nis 2021

  • CVE-2021-27651
    55Planlayın

    In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentica

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    pega · infinity29 Nis 2021

  • CVE-2021-28959
    44Planlayın

    Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive.

    KritikCVSS 9,8İstismar yokEPSS %16

    zohocorp · manageengine eventlog analyzer30 Nis 2021

  • CVE-2021-31933
    32İzleyin

    A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uplo

    YüksekCVSS 7,2Kavram kanıtıEPSS %13

    chamilo · chamilo30 Nis 2021