İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2021: sömürülen ve yeni ciddi CVE kayıtları

96 kayıt · 30 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2021-37415
    99Hemen

    Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authenticatio

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zohocorp · manageengine servicedesk plus1 Eyl 2021

  • CVE-2021-39378
    46Planlayın

    A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database.

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    os4ed · opensis1 Eyl 2021

  • CVE-2021-35215
    56Planlayın

    ActionPluginBaseView Deserialization of Untrusted Data RCE

    YüksekCVSS 8,8Kavram kanıtıEPSS %69

    solarwinds · orion platform1 Eyl 2021

  • CVE-2021-35216
    59Planlayın

    Deserialization of Untrusted Data in Resource Controls Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %81

    solarwinds · patch manager1 Eyl 2021

  • CVE-2021-35218
    58Planlayın

    Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %76

    solarwinds · orion platform1 Eyl 2021

  • CVE-2021-40378
    37İzleyin

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

    YüksekCVSS 8,1Kavram kanıtıEPSS %15

    comprotech · ip70 firmware1 Eyl 2021

  • CVE-2021-40379
    36İzleyin

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    comprotech · ip70 firmware1 Eyl 2021

  • CVE-2021-40380
    37İzleyin

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    comprotech · ip70 firmware1 Eyl 2021

  • CVE-2021-40381
    37İzleyin

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    comprotech · ip70 firmware1 Eyl 2021

  • CVE-2021-40382
    37İzleyin

    An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    comprotech · ip70 firmware1 Eyl 2021

  • CVE-2021-34746
    44Planlayın

    Cisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %17

    cisco · enterprise nfv infrastructure software1 Eyl 2021

  • CVE-2021-28550
    81Hemen

    Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %51

    adobe · acrobat dc2 Eyl 2021

  • CVE-2021-28558
    38İzleyin

    Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution

    YüksekCVSS 8,8İstismar yokEPSS %10

    adobe · acrobat dc2 Eyl 2021

  • CVE-2021-28560
    55Planlayın

    Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution

    YüksekCVSS 8,8İstismar yokEPSS %66

    adobe · acrobat dc2 Eyl 2021

  • CVE-2021-38314
    30İzleyin

    Gutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %28

    redux · gutenberg template library \& redux framework2 Eyl 2021

  • CVE-2021-40531
    49Planlayın

    Sketch before 75 allows library feeds to be used to bypass file quarantine.

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    sketch · sketch6 Eyl 2021

  • CVE-2021-40539
    99Hemen

    Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execu

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    zohocorp · manageengine adselfservice plus7 Eyl 2021

  • CVE-2020-11264
    43Planlayın

    Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapd

    KritikCVSS 9,8İstismar yokEPSS %13

    qualcomm · apq8053 firmware8 Eyl 2021

  • CVE-2020-11301
    33İzleyin

    Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto

    YüksekCVSS 7,5İstismar yokEPSS %11

    qualcomm · apq8009 firmware8 Eyl 2021

  • CVE-2021-30721
    33İzleyin

    A path handling issue was addressed with improved validation.

    OrtaCVSS 6,5İstismar yokEPSS %24

    apple · mac os x8 Eyl 2021

  • CVE-2021-30761
    68Bu hafta

    A memory corruption issue was addressed with improved state management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    apple · iphone os8 Eyl 2021

  • CVE-2021-30762
    68Bu hafta

    A use after free issue was addressed with improved memory management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    apple · iphone os8 Eyl 2021

  • CVE-2021-35217
    57Planlayın

    Insecure Deserialization of untrusted data causing Remote code execution vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %72

    solarwinds · patch manager8 Eyl 2021

  • CVE-2021-30657
    73Bu hafta

    A logic issue was addressed with improved state management.

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %68

    apple · mac os x8 Eyl 2021

  • CVE-2021-30661
    66Bu hafta

    A use after free issue was addressed with improved memory management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %4

    apple · safari8 Eyl 2021

  • CVE-2021-30663
    66Bu hafta

    An integer overflow was addressed with improved input validation.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %3

    apple · safari8 Eyl 2021

  • CVE-2021-30665
    66Bu hafta

    A memory corruption issue was addressed with improved state management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %3

    apple · ipados8 Eyl 2021

  • CVE-2021-30666
    66Bu hafta

    A buffer overflow issue was addressed with improved memory handling.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %2

    apple · iphone os8 Eyl 2021

  • CVE-2021-30713
    63Bu hafta

    A permissions issue was addressed with improved validation.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7

    apple · mac os x8 Eyl 2021

  • CVE-2021-40346
    48Planlayın

    An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, a

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    haproxy · haproxy8 Eyl 2021

  • CVE-2021-38408
    42Planlayın

    A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the leng

    KritikCVSS 9,8İstismar yokEPSS %11

    advantech · webaccess9 Eyl 2021

  • CVE-2020-7873
    39İzleyin

    Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary f

    KritikCVSS 9,8İstismar yokEPSS %0

    ksystem · k-system wellcomm9 Eyl 2021

  • CVE-2021-38540
    63Bu hafta

    Apache Airflow: Variable Import endpoint missed authentication check

    KritikCVSS 9,8Kavram kanıtıEPSS %80

    apache · airflow9 Eyl 2021

  • CVE-2021-24040
    44Planlayın

    Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicio

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    facebook · parlai10 Eyl 2021

  • CVE-2021-40870
    97Hemen

    An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    aviatrix · controller13 Eyl 2021

  • CVE-2021-33543
    63Bu hafta

    UDP Technology/Geutebrück camera devices: Authentication Bypass

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33544
    57Planlayın

    UDP Technology/Geutebrück camera devices: command injection leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %95

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33548
    46Planlayın

    UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %59

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33549
    49Planlayın

    UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %68

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33550
    46Planlayın

    UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %59

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33551
    43Planlayın

    UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %51

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33552
    43Planlayın

    UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %51

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33553
    43Planlayın

    UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %51

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-33554
    46Planlayın

    UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %59

    geutebrueck · g-cam ebc-2110 firmware13 Eyl 2021

  • CVE-2021-37200
    41Planlayın

    A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1).

    YüksekCVSS 7,7İstismar yokEPSS %37

    siemens · sinec network management system14 Eyl 2021

  • CVE-2021-38163
    76Bu hafta

    SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administra

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %36

    sap · netweaver14 Eyl 2021

  • CVE-2021-36952
    46Planlayın

    Visual Studio Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %51

    microsoft · visual studio 201715 Eyl 2021

  • CVE-2021-36955
    62Bu hafta

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4

    microsoft · windows 10 150715 Eyl 2021

  • CVE-2021-38645
    62Bu hafta

    Open Management Infrastructure Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    microsoft · azure automation state configuration15 Eyl 2021

  • CVE-2021-38646
    63Bu hafta

    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7

    microsoft · 365 apps15 Eyl 2021

  • CVE-2021-38647
    99Hemen

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    microsoft · azure automation state configuration15 Eyl 2021

  • CVE-2021-38648
    64Bu hafta

    Open Management Infrastructure Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %11

    microsoft · azure automation state configuration15 Eyl 2021

  • CVE-2021-38649
    59Planlayın

    Open Management Infrastructure Elevation of Privilege Vulnerability

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %2

    microsoft · azure automation state configuration15 Eyl 2021

  • CVE-2021-40444
    94Hemen

    Microsoft MSHTML Remote Code Execution Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %97

    microsoft · windows 10 150715 Eyl 2021

  • CVE-2021-21798
    37İzleyin

    An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF.

    YüksekCVSS 7,8İstismar yokEPSS %21

    gonitro · nitro pro15 Eyl 2021

  • CVE-2021-38156
    49Planlayın

    In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard.

    OrtaCVSS 5,4Kavram kanıtıEPSS %92

    nagios · nagios xi15 Eyl 2021

  • CVE-2021-33690
    60Bu hafta

    Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service v

    KritikCVSS 9,9Kavram kanıtıEPSS %69

    sap · netweaver development infrastructure15 Eyl 2021

  • CVE-2021-33044
    99Hemen

    The identity authentication bypass vulnerability found in some Dahua products during the login process.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    dahuasecurity · ipc-hum7xxx firmware15 Eyl 2021

  • CVE-2021-33045
    99Hemen

    The identity authentication bypass vulnerability found in some Dahua products during the login process.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    dahuasecurity · ipc-hum7xxx firmware15 Eyl 2021

  • CVE-2021-34798
    49Planlayın

    NULL pointer dereference in httpd core

    YüksekCVSS 7,5İstismar yokEPSS %64

    apache · http server16 Eyl 2021

  • CVE-2021-36160
    49Planlayın

    mod_proxy_uwsgi out of bound read

    YüksekCVSS 7,5İstismar yokEPSS %62

    apache · http server16 Eyl 2021

  • CVE-2021-39275
    51Planlayın

    ap_escape_quotes buffer overflow

    KritikCVSS 9,8İstismar yokEPSS %39

    apache · http server16 Eyl 2021

  • CVE-2021-40438
    96Hemen

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %99

    resf · rocky linux16 Eyl 2021

  • CVE-2021-41314
    39İzleyin

    Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the a

    YüksekCVSS 8,8İstismar yokEPSS %13

    netgear · gc108p firmware16 Eyl 2021

  • CVE-2021-41303
    62Bu hafta

    Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass

    KritikCVSS 9,8İstismar yokEPSS %76

    apache · shiro17 Eyl 2021

  • CVE-2021-39327
    60Bu hafta

    BulletProof Security <= 5.1 Sensitive Information Disclosure

    OrtaCVSS 5,3SilahlaştırılmışEPSS %71

    ait-pro · bulletproof security17 Eyl 2021

  • CVE-2021-38406
    84Hemen

    Delta Electronics DOPSoft 2 Out-of-Bounds Write

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %76

    deltaww · dopsoft17 Eyl 2021

  • CVE-2021-40847
    35İzleyin

    The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code executio

    YüksekCVSS 8,1İstismar yokEPSS %10

    netgear · r6400v2 firmware21 Eyl 2021

  • CVE-2021-36260
    99Hemen

    A command injection vulnerability in the web server of some Hikvision product.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    hikvision · ds-2cd2026g2-iu\/sl firmware22 Eyl 2021

  • CVE-2021-37925
    42Planlayın

    Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %10

    zohocorp · manageengine admanager plus22 Eyl 2021

  • CVE-2021-40875
    44Planlayın

    Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure.

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    gurock · testrail22 Eyl 2021

  • CVE-2021-33035
    46Planlayın

    Buffer overflow from a crafted DBF file

    YüksekCVSS 7,8İstismar yokEPSS %50

    apache · openoffice23 Eyl 2021

  • CVE-2021-22005
    99Hemen

    The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    vmware · cloud foundation23 Eyl 2021

  • CVE-2021-22015
    40Planlayın

    The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %1

    vmware · cloud foundation23 Eyl 2021

  • CVE-2021-22017
    66Bu hafta

    Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %49

    vmware · vcenter server23 Eyl 2021

  • CVE-2021-22941
    85Hemen

    Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compro

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %53

    citrix · sharefile storagezones controller23 Eyl 2021

  • CVE-2021-41381
    46Planlayın

    Payara Micro Community 5.2021.6 and below allows Directory Traversal.

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    payara · micro community23 Eyl 2021

  • CVE-2021-36749
    50Planlayın

    Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)

    OrtaCVSS 6,5Kavram kanıtıEPSS %80

    apache · druid24 Eyl 2021

  • CVE-2021-40655
    86Hemen

    An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %86

    dlink · dir-605l firmware24 Eyl 2021

  • CVE-2021-37539
    67Bu hafta

    Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %92

    zohocorp · manageengine admanager plus27 Eyl 2021

  • CVE-2021-20034
    60Bu hafta

    An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete a

    KritikCVSS 9,1Kavram kanıtıEPSS %81

    sonicwall · sma 200 firmware27 Eyl 2021

  • CVE-2021-20035
    57Planlayın

    Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary co

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %4

    sonicwall · sma 200 firmware27 Eyl 2021

  • CVE-2021-40651
    31İzleyin

    OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arb

    OrtaCVSS 6,5Kavram kanıtıEPSS %17

    os4ed · opensis29 Eyl 2021

  • CVE-2021-39836
    52Planlayın

    Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %69

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39837
    51Planlayın

    Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %65

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39838
    51Planlayın

    Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %65

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39839
    51Planlayın

    Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %65

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39840
    46Planlayın

    Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %50

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39841
    35İzleyin

    Adobe Acrobat Pro DC DocMedia Type Confusion Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %11

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39842
    36İzleyin

    Adobe Acrobat Reader DC messageHandler.OnMessage Use-After-Free Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %17

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39843
    54Planlayın

    Adobe Acrobat Reader XObject Out-of-Bound Write Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %76

    adobe · acrobat29 Eyl 2021

  • CVE-2021-39863
    35İzleyin

    Adobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    adobe · acrobat dc29 Eyl 2021

  • CVE-2021-41826
    28İzleyin

    PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessions_controller.rb open redirect.

    OrtaCVSS 6,1Kavram kanıtıEPSS %12

    place · placeos authentication29 Eyl 2021

  • CVE-2021-41291
    55Planlayın

    ECOA BAS controller - Path Traversal-1

    YüksekCVSS 7,5Kavram kanıtıEPSS %82

    ecoa · ecs router controller-ecs firmware30 Eyl 2021

  • CVE-2021-41293
    36İzleyin

    ECOA BAS controller - Path Traversal-3

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    ecoa · ecs router controller-ecs firmware30 Eyl 2021

  • CVE-2021-41288
    63Bu hafta

    Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.

    KritikCVSS 9,8İstismar yokEPSS %79

    zohocorp · manageengine opmanager30 Eyl 2021