Export limit exceeded: 373055 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (373055 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-45915 | 1 Luxsoft | 1 Luxcal | 2024-11-21 | 9.8 Critical |
| In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. | ||||
| CVE-2021-45914 | 1 Luxsoft | 1 Luxcal | 2024-11-21 | 9.8 Critical |
| In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. | ||||
| CVE-2021-45913 | 1 Controlup | 1 Controlup Agent | 2024-11-21 | 7.2 High |
| A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel. | ||||
| CVE-2021-45912 | 1 Controlup | 1 Real-time Agent | 2024-11-21 | 7.8 High |
| An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method. | ||||
| CVE-2021-45911 | 2 Debian, Gif2apng Project | 2 Debian Linux, Gif2apng | 2024-11-21 | 7.8 High |
| An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside the boundaries of the buffer. | ||||
| CVE-2021-45910 | 2 Debian, Gif2apng Project | 2 Debian Linux, Gif2apng | 2024-11-21 | 7.8 High |
| An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and (to some extent) control over the amount of data that is written. | ||||
| CVE-2021-45909 | 2 Debian, Gif2apng Project | 2 Debian Linux, Gif2apng | 2024-11-21 | 7.8 High |
| An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer. | ||||
| CVE-2021-45908 | 1 Gif2apng Project | 1 Gif2apng | 2024-11-21 | 7.8 High |
| An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted. | ||||
| CVE-2021-45907 | 1 Gif2apng Project | 1 Gif2apng | 2024-11-21 | 7.8 High |
| An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted. | ||||
| CVE-2021-45906 | 1 Openwrt | 1 Openwrt | 2024-11-21 | 5.4 Medium |
| OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen. | ||||
| CVE-2021-45905 | 1 Openwrt | 1 Openwrt | 2024-11-21 | 5.4 Medium |
| OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen. | ||||
| CVE-2021-45904 | 1 Openwrt | 1 Openwrt | 2024-11-21 | 5.4 Medium |
| OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen. | ||||
| CVE-2021-45903 | 1 Salesagility | 1 Suitecrm | 2024-11-21 | 6.1 Medium |
| A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x before 7.12.2, allows a remote attacker to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE-2021-39267 and CVE-2021-39268. | ||||
| CVE-2021-45901 | 1 Servicenow | 1 Servicenow | 2024-11-21 | 5.3 Medium |
| The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists. | ||||
| CVE-2021-45900 | 1 Vivoh | 1 Webinar Manager | 2024-11-21 | 6.5 Medium |
| Vivoh Webinar Manager before 3.6.3.0 has improper API authentication. When a user logs in to the administration configuration web portlet, a VIVOH_AUTH cookie is assigned so that they can be uniquely identified. Certain APIs can be successfully executed without proper authentication. This can let an attacker impersonate as victim and make state changing requests on their behalf. | ||||
| CVE-2021-45899 | 1 Salesagility | 1 Suitecrm | 2024-11-21 | 9.8 Critical |
| SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution. | ||||
| CVE-2021-45898 | 1 Salesagility | 1 Suitecrm | 2024-11-21 | 9.8 Critical |
| SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion. | ||||
| CVE-2021-45897 | 1 Salesagility | 1 Suitecrm | 2024-11-21 | 8.8 High |
| SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution. | ||||
| CVE-2021-45896 | 1 Nokia | 2 Fastmile, Fastmile Firmware | 2024-11-21 | 8.8 High |
| Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via is_ctc_admin=1 to login_web_app.cgi and use of Import Config File. | ||||
| CVE-2021-45895 | 1 Netgen | 1 Tags Bundle | 2024-11-21 | 6.1 Medium |
| Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface. | ||||