İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2021: sömürülen ve yeni ciddi CVE kayıtları

92 kayıt · 22 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2021-24472
    56Planlayın

    Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    qantumthemes · kentharadio2 Ağu 2021

  • CVE-2021-24488
    27İzleyin

    Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %11

    pickplugins · post grid2 Ağu 2021

  • CVE-2021-26085
    81Hemen

    Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %99

    atlassian · confluence data center2 Ağu 2021

  • CVE-2021-31630
    43Planlayın

    Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on

    YüksekCVSS 8,8Kavram kanıtıEPSS %27

    openplcproject · openplc v3 firmware3 Ağu 2021

  • CVE-2021-37556
    43Planlayın

    A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-pri

    YüksekCVSS 8,8İstismar yokEPSS %27

    centreon · centreon3 Ağu 2021

  • CVE-2021-37557
    43Planlayın

    A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-pri

    YüksekCVSS 8,8İstismar yokEPSS %27

    centreon · centreon3 Ağu 2021

  • CVE-2021-30560
    40Planlayın

    Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a

    YüksekCVSS 8,8İstismar yokEPSS %17

    google · chrome3 Ağu 2021

  • CVE-2021-30563
    68Bu hafta

    Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %9

    google · chrome3 Ağu 2021

  • CVE-2021-32804
    37İzleyin

    Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

    YüksekCVSS 8,1Kavram kanıtıEPSS %15

    tar project · tar3 Ağu 2021

  • CVE-2020-19302
    40Planlayın

    An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing upl

    KritikCVSS 9,8İstismar yokEPSS %1

    vaethink · vaethink3 Ağu 2021

  • CVE-2021-34833
    60Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    YüksekCVSS 7,8İstismar yokEPSS %95

    foxit · pdf reader4 Ağu 2021

  • CVE-2021-34842
    35İzleyin

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    YüksekCVSS 7,8İstismar yokEPSS %13

    foxit · pdf reader4 Ağu 2021

  • CVE-2021-34847
    49Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    YüksekCVSS 7,8İstismar yokEPSS %61

    foxit · pdf reader4 Ağu 2021

  • CVE-2021-34850
    42Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    YüksekCVSS 7,8İstismar yokEPSS %38

    foxit · pdf reader4 Ağu 2021

  • CVE-2021-32706
    53Planlayın

    (Authenticated) Remote Code Execution Possible in Web Interface 5.5

    YüksekCVSS 8,8SilahlaştırılmışEPSS %60

    pi-hole · pi-hole4 Ağu 2021

  • CVE-2021-20028
    78Bu hafta

    Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, s

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %30

    sonicwall · sma 210 firmware4 Ağu 2021

  • CVE-2021-34371
    43Planlayın

    Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSes

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    neo4j · neo4j5 Ağu 2021

  • CVE-2021-21805
    60Bu hafta

    An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020).

    KritikCVSS 9,8Kavram kanıtıEPSS %69

    advantech · r-seenet5 Ağu 2021

  • CVE-2021-35324
    42Planlayın

    A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication

    KritikCVSS 9,8İstismar yokEPSS %10

    totolink · a720r firmware5 Ağu 2021

  • CVE-2021-35325
    34İzleyin

    A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial o

    YüksekCVSS 7,5İstismar yokEPSS %13

    totolink · a720r firmware5 Ağu 2021

  • CVE-2021-22926
    35İzleyin

    libcurl-using applications can ask for a specific client certificate to be used in a transfer.

    YüksekCVSS 7,5İstismar yokEPSS %15

    haxx · curl5 Ağu 2021

  • CVE-2021-24499
    57Planlayın

    Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %60

    amentotech · workreap9 Ağu 2021

  • CVE-2021-24507
    42Planlayın

    Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    brainstormforce · astra9 Ağu 2021

  • CVE-2021-33256
    59Planlayın

    A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unaut

    YüksekCVSS 8,8İstismar yokEPSS %79

    zohocorp · manageengine adselfservice plus9 Ağu 2021

  • CVE-2021-37152
    28İzleyin

    Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0.

    OrtaCVSS 5,4Kavram kanıtıEPSS %24

    sonatype · nexus repository manager10 Ağu 2021

  • CVE-2021-37425
    56Planlayın

    Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or rea

    KritikCVSS 9,1Kavram kanıtıEPSS %66

    altova · mobiletogether server10 Ağu 2021

  • CVE-2021-38085
    40Planlayın

    The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %0

    canon · pixma tr150 firmware11 Ağu 2021

  • CVE-2021-26424
    57Planlayın

    Windows TCP/IP Remote Code Execution Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %61

    microsoft · windows 1012 Ağu 2021

  • CVE-2021-26432
    42Planlayın

    Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %11

    microsoft · windows 1012 Ağu 2021

  • CVE-2021-34478
    46Planlayın

    Microsoft Office Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %51

    microsoft · 365 apps12 Ağu 2021

  • CVE-2021-34480
    37İzleyin

    Scripting Engine Memory Corruption Vulnerability

    OrtaCVSS 6,8İstismar yokEPSS %34

    microsoft · windows 1012 Ağu 2021

  • CVE-2021-34484
    68Bu hafta

    Windows User Profile Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %21

    microsoft · windows 10 150712 Ağu 2021

  • CVE-2021-34486
    64Bu hafta

    Windows Event Tracing Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %9

    microsoft · windows 10 180912 Ağu 2021

  • CVE-2021-34535
    42Planlayın

    Remote Desktop Client Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %21

    microsoft · remote desktop client12 Ağu 2021

  • CVE-2021-36942
    80Hemen

    Windows LSA Spoofing Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %66

    microsoft · windows server 200412 Ağu 2021

  • CVE-2021-36948
    68Bu hafta

    Windows Update Medic Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %23

    microsoft · windows 10 180912 Ağu 2021

  • CVE-2021-36958
    40Planlayın

    Windows Print Spooler Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %30

    microsoft · windows12 Ağu 2021

  • CVE-2021-37343
    42Planlayın

    A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE unde

    YüksekCVSS 8,8SilahlaştırılmışEPSS %23

    nagios · nagios xi13 Ağu 2021

  • CVE-2021-37344
    68Bu hafta

    Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used

    KritikCVSS 9,8İstismar yokEPSS %96

    nagios · nagios xi switch wizard13 Ağu 2021

  • CVE-2021-37346
    61Bu hafta

    Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements

    KritikCVSS 9,8İstismar yokEPSS %73

    nagios · nagios xi watchguard wizard13 Ağu 2021

  • CVE-2021-37350
    63Bu hafta

    Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.

    KritikCVSS 9,8İstismar yokEPSS %79

    nagios · nagios xi13 Ağu 2021

  • CVE-2021-36380
    98Hemen

    Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDia

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    sunhillo · sureline13 Ağu 2021

  • CVE-2021-26086
    81Hemen

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerabilit

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %99

    atlassian · jira data center15 Ağu 2021

  • CVE-2021-3708
    38İzleyin

    D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection.

    YüksekCVSS 7,8İstismar yokEPSS %24

    dlink · dsl-2750u firmware16 Ağu 2021

  • CVE-2021-33193
    44Planlayın

    Request splitting via HTTP/2 method injection and mod_proxy

    YüksekCVSS 7,5İstismar yokEPSS %46

    debian · debian linux16 Ağu 2021

  • CVE-2021-35392
    55Planlayın

    Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.

    YüksekCVSS 7,5Kavram kanıtıEPSS %83

    realtek · rtl819x jungle software development kit16 Ağu 2021

  • CVE-2021-35393
    59Planlayın

    Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols.

    KritikCVSS 9,8İstismar yokEPSS %68

    realtek · rtl819x jungle software development kit16 Ağu 2021

  • CVE-2021-35394
    99Hemen

    Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    realtek · rtl819x jungle software development kit16 Ağu 2021

  • CVE-2021-35395
    98Hemen

    Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    realtek · rtl819x jungle software development kit16 Ağu 2021

  • CVE-2021-22931
    46Planlayın

    Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation

    KritikCVSS 9,8İstismar yokEPSS %21

    nodejs · node.js16 Ağu 2021

  • CVE-2021-22939
    25İzleyin

    If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned an

    OrtaCVSS 5,3İstismar yokEPSS %14

    nodejs · node.js16 Ağu 2021

  • CVE-2021-22940
    34İzleyin

    Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory c

    YüksekCVSS 7,5İstismar yokEPSS %13

    nodejs · node.js16 Ağu 2021

  • CVE-2021-34730
    45Planlayın

    Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    cisco · application extension platform18 Ağu 2021

  • CVE-2021-34228
    33İzleyin

    Cross-site scripting in parent_control.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execut

    OrtaCVSS 6,1İstismar yokEPSS %29

    totolink · a3002r firmware20 Ağu 2021

  • CVE-2021-22238
    43Planlayın

    An issue has been discovered in GitLab affecting all versions starting with 13.3.

    OrtaCVSS 5,4İstismar yokEPSS %71

    gitlab · gitlab20 Ağu 2021

  • CVE-2021-36748
    35İzleyin

    A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    prestahome · blog20 Ağu 2021

  • CVE-2021-28635
    46Planlayın

    Adobe Acrobat Reader Use-After-Free Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %51

    adobe · acrobat dc20 Ağu 2021

  • CVE-2021-28639
    51Planlayın

    Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %66

    adobe · acrobat dc20 Ağu 2021

  • CVE-2021-28640
    45Planlayın

    Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %53

    adobe · acrobat dc20 Ağu 2021

  • CVE-2021-39144
    93Hemen

    XStream is vulnerable to a Remote Command Execution attack

    YüksekCVSS 8,5KEVSilahlaştırılmışEPSS %98

    xstream · xstream23 Ağu 2021

  • CVE-2021-39608
    42Planlayın

    Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user e

    YüksekCVSS 7,2Kavram kanıtıEPSS %45

    flatcore · flatcore-cms23 Ağu 2021

  • CVE-2021-39141
    39İzleyin

    XStream is vulnerable to an Arbitrary Code Execution attack

    YüksekCVSS 8,5Kavram kanıtıEPSS %16

    xstream · xstream23 Ağu 2021

  • CVE-2021-39146
    38İzleyin

    XStream is vulnerable to an Arbitrary Code Execution attack

    YüksekCVSS 8,5Kavram kanıtıEPSS %14

    xstream · xstream23 Ağu 2021

  • CVE-2021-39152
    37İzleyin

    A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

    YüksekCVSS 8,5Kavram kanıtıEPSS %11

    xstream · xstream23 Ağu 2021

  • CVE-2021-37538
    61Bu hafta

    Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to exec

    KritikCVSS 9,8Kavram kanıtıEPSS %74

    smartdatasoft · smartblog24 Ağu 2021

  • CVE-2021-38556
    39İzleyin

    includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection.

    YüksekCVSS 8,8İstismar yokEPSS %13

    raspap · raspap24 Ağu 2021

  • CVE-2021-3712
    44Planlayın

    Read buffer overruns processing ASN.1 strings

    YüksekCVSS 7,4Kavram kanıtıEPSS %50

    openssl · openssl24 Ağu 2021

  • CVE-2021-28554
    45Planlayın

    Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read could lead to arbitrary code execution

    YüksekCVSS 7,8İstismar yokEPSS %46

    adobe · acrobat dc24 Ağu 2021

  • CVE-2021-3711
    65Bu hafta

    SM2 Decryption Buffer Overflow

    KritikCVSS 9,8İstismar yokEPSS %87

    openssl · openssl24 Ağu 2021

  • CVE-2021-30858
    69Bu hafta

    A use after free issue was addressed with improved memory management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %13

    apple · ipados24 Ağu 2021

  • CVE-2021-30860
    84Hemen

    An integer overflow was addressed with improved input validation.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %75

    apple · ipados24 Ağu 2021

  • CVE-2021-30869
    62Bu hafta

    A type confusion issue was addressed with improved state handling.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4

    apple · ipados24 Ağu 2021

  • CVE-2021-30883
    65Bu hafta

    A memory corruption issue was addressed with improved memory handling.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %14

    apple · ipados24 Ağu 2021

  • CVE-2021-30892
    25İzleyin

    An inherited permissions issue was addressed with additional restrictions.

    OrtaCVSS 5,5İstismar yokEPSS %10

    apple · mac os x24 Ağu 2021

  • CVE-2021-30900
    63Bu hafta

    An out-of-bounds write issue was addressed with improved bounds checking.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %5

    apple · ipados24 Ağu 2021

  • CVE-2021-30937
    36İzleyin

    A memory corruption vulnerability was addressed with improved locking.

    YüksekCVSS 7,8Kavram kanıtıEPSS %17

    apple · ipados24 Ağu 2021

  • CVE-2021-30952
    63Bu hafta

    An integer overflow was addressed with improved input validation.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %6

    apple · safari24 Ağu 2021

  • CVE-2021-30970
    26İzleyin

    A logic issue was addressed with improved state management.

    OrtaCVSS 5,5İstismar yokEPSS %14

    apple · macos24 Ağu 2021

  • CVE-2021-30983
    62Bu hafta

    A buffer overflow issue was addressed with improved memory handling.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    apple · ipados24 Ağu 2021

  • CVE-2021-31010
    61Bu hafta

    A deserialization issue was addressed through improved validation.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %3

    apple · ipados24 Ağu 2021

  • CVE-2021-22242
    40Planlayın

    Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site sc

    OrtaCVSS 5,4İstismar yokEPSS %63

    gitlab · gitlab25 Ağu 2021

  • CVE-2021-32648
    93Hemen

    Account Takeover in Octobercms

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %90

    octobercms · october26 Ağu 2021

  • CVE-2021-39172
    44Planlayın

    New line injection during configuration edition

    YüksekCVSS 8,8Kavram kanıtıEPSS %29

    catchethq · catchet27 Ağu 2021

  • CVE-2021-26084
    99Hemen

    In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attack

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    atlassian · confluence data center30 Ağu 2021

  • CVE-2021-32955
    50Planlayın

    Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.

    KritikCVSS 9,8İstismar yokEPSS %37

    deltaww · diaenergie30 Ağu 2021

  • CVE-2021-38390
    45Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie30 Ağu 2021

  • CVE-2021-38393
    45Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5

    KritikCVSS 9,8İstismar yokEPSS %18

    deltaww · diaenergie30 Ağu 2021

  • CVE-2021-33055
    44Planlayın

    Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions.

    KritikCVSS 9,8İstismar yokEPSS %18

    zohocorp · manageengine adselfservice plus30 Ağu 2021

  • CVE-2021-34646
    54Planlayın

    Booster for WooCommerce <= 5.4.3 Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    booster · booster for woocommerce30 Ağu 2021

  • CVE-2021-36356
    55Planlayın

    KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts a

    KritikCVSS 9,8Kavram kanıtıEPSS %54

    kramerav · viaware31 Ağu 2021

  • CVE-2021-39316
    50Planlayın

    ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

    YüksekCVSS 7,5Kavram kanıtıEPSS %65

    digitalzoomstudio · zoomsounds31 Ağu 2021

  • CVE-2020-20495
    36İzleyin

    bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the `deleteBackup' parameter.

    KritikCVSS 9,1İstismar yokEPSS %1

    bludit · bludit31 Ağu 2021