by Kastro CVE-2021-41277 · metabase metabase
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 692 of 786
metabase
FactorJS
Apache Software Foundation
CVE-2021-37580 · Apache Software Foundation Apache ShenYu Admin
Apache ShenYu Admin bypass JWT authentication
CVE-2021-36372 · Apache Software Foundation Apache Ozone
Original block tokens are persisted and can be retrieved
CVE-2021-39231 · Apache Software Foundation Apache Ozone
Missing authentication/authorization on internal RPC endpoints
CVE-2021-39233 · Apache Software Foundation Apache Ozone
Container-related datanode operations can be called without authorization
Ipack Automation Systems
CVE-2021-3958 · Ipack Automation Systems Ipack SCADA Software
SQL Injection Vulnerability in Ipack SCADA Software
minio
mitre
CVE-2020-16152 · mitre
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attack…
CVE-2021-41653 · mitre
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execut…
CVE-2021-41765 · mitre
A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 < rev 18274 allows remote unauthenticated…
CVE-2021-42580 · mitre
Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and…
CVE-2021-43617 · mitre
Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/…
CVE-2021-41435 · mitre
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U…
CVE-2021-41950 · mitre
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files o…
CVE-2021-43272 · mitre
An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11.
CVE-2021-43616 · mitre
The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json dif…
CVE-2021-44079 · mitre
In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potential…
CVE-2021-44143 · mitre
A flaw was found in mbsync in isync 1.4.0 through 1.4.3.
CVE-2021-32234 · mitre
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
CVE-2021-37592 · mitre
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence o…
CVE-2021-43996 · mitre
The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect…
CVE-2021-41931 · mitre
The Company's Recruitment Management System in id=2 of the parameter from view_vacancy app on-page appears to be vulnerable to SQL inject…
CVE-2021-44144 · mitre
Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date.
talos
busybox
Dell
CVE-2021-36306 · Dell Networking OS
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability.
CVE-2021-36308 · Dell Networking OS
Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability.
CVE-2021-36320 · Dell Networking X-Series
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability.
EFM networks & multimedia
CVE-2021-26614 · EFM networks & multimedia ipTIME C200 IP Camera
IpTime C200 IP camera remote code execution vulnerability
fedora
snyk
Micron
puppet
QNAP Systems Inc.
CVE-2021-38684 · QNAP Systems Inc. Multimedia Console
Buffer Overflow Vulnerability in Multimedia Console
TIBCO Software Inc.
CVE-2021-43048 · TIBCO Software Inc. TIBCO PartnerExpress
TIBCO PartnerExpress Click-Jacking vulnerability
CVE-2021-43047 · TIBCO Software Inc. TIBCO PartnerExpress
TIBCO PartnerExpress Cross Site Scripting vulnerabilities
vmware
wpo365.com
CVE-2021-43409 · wpo365.com WordPress + Microsoft Office 365 / Azure AD | LOGIN
WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting
Huawei
Gallagher
CVE-2021-23155 · Gallagher Command Centre Mobile Client for Android