CVE-2021-3553
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a…
Devamını oku
Kategori: Güvenlik Açıkları
CVE-2021-3554
Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to…
CVE-2021-3552 (endpoint_security_tools, gravityzone)
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server.…
CVE-2021-20846 (push_notifications_for_wordpress)
Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an…
CVE-2021-20850 (powercms)
PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) allows a remote…
CVE-2021-31822 (tentacle)
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user…
CVE-2021-32037 (mongodb)
An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to…
CVE-2021-20835
Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) – Marketplace and Mobile Payments App' (Japan version) versions prior to…
CVE-2021-20835 (mercari)
Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) – Marketplace and Mobile Payments App' (Japan version) versions prior to…
CVE-2021-40369
A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow the attacker to…