CVE-2021-32036
An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may […]
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may […]
İçeriği inceleyin### Impact It's possible to know if a user has or not an account in a wiki related to an email address, […]
İçeriği inceleyinIn Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. […]
İçeriği inceleyinApache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions
İçeriği inceleyinA potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability […]
İçeriği inceleyinIBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047. Devamını Oku
İçeriği inceleyinImproper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make […]
İçeriği inceleyinAMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious […]
İçeriği inceleyinWhen combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits […]
İçeriği inceleyinAMD EPYCâ„¢ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with […]
İçeriği inceleyinA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or […]
İçeriği inceleyinA misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly simplifies a man-in-the-middle attack, which […]
İçeriği inceleyin