CVE-2021-3554
Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik AçıklarıGelişmeleri izleyin.
Gelişmeleri izleyin.
Riskleri önceliklendirin.
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2021-3552 (endpoint_security_tools, gravityzone)
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to […]
İçeriği inceleyinCVE-2021-20846 (push_notifications_for_wordpress)
Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the […]
İçeriği inceleyinCVE-2021-20850 (powercms)
PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) […]
İçeriği inceleyinCVE-2021-31822 (tentacle)
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a […]
İçeriği inceleyinCVE-2021-32037 (mongodb)
An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request […]
İçeriği inceleyinCVE-2021-20835
Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) – Marketplace and Mobile Payments App' (Japan version) […]
İçeriği inceleyinCVE-2021-20835 (mercari)
Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) – Marketplace and Mobile Payments App' (Japan version) […]
İçeriği inceleyinCVE-2021-40369
A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow […]
İçeriği inceleyinCVE-2018-11890
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not […]
İçeriği inceleyinCVE-2018-11896
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not […]
İçeriği inceleyinCVE-2018-11900
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not […]
İçeriği inceleyin