|
201291
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS) vulnerability exists in a…
|
CWE-79
Cross-site Scripting
|
CVE-2021-22979
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201292
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_security_manager big-ip_advanced_web_application_firewall
|
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM system processes WebS…
|
NVD-CWE-Other
|
CVE-2021-22976
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201293
|
7.5 |
HIGH
Network
|
f5
|
big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_firewall big-ip_application_security_manager big-ip_access_policy_manager big-ip_link_controller…
|
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while pas…
|
NVD-CWE-noinfo
|
CVE-2021-22975
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201294
|
7.5 |
HIGH
Network
|
f5
|
big-iq_centralized_management big-ip_advanced_firewall_manager big-ip_fraud_protection_service big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_f…
|
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iCo…
|
CWE-362
Race Condition
|
CVE-2021-22974
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201295
|
7.5 |
HIGH
Network
|
f5
|
big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager big-ip_fraud_protection_servi…
|
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSON parser function does not protect against out-of-bounds me…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-22973
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201296
|
7.5 |
HIGH
Network
|
is-user-valid_project
|
is-user-valid
|
All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure.
|
CWE-74
Injection
|
CVE-2021-23335
|
2024-11-21 14:51 |
2021-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201297
|
4.8 |
MEDIUM
Network
|
mcafee
|
endpoint_security
|
A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event w…
|
CWE-79
Cross-site Scripting
|
CVE-2021-23881
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201298
|
7.8 |
HIGH
Local
|
mcafee
|
total_protection
|
Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially c…
|
NVD-CWE-noinfo
|
CVE-2021-23876
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201299
|
7.8 |
HIGH
Local
|
mcafee
|
total_protection
|
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2021-23874
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201300
|
6.1 |
MEDIUM
Local
|
mcafee
|
total_protection
|
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially…
|
CWE-59
Link Following
|
CVE-2021-23873
|
2024-11-21 14:51 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|