|
197211
|
5.7 |
MEDIUM
Network
|
glpi-project
|
glpi
|
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI version 9.5.3, it was possible to switch ent…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2021-21255
|
2024-11-21 14:47 |
2021-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197212
|
8.8 |
HIGH
Network
|
redislabs
|
redis
|
Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap an…
|
-
|
CVE-2021-21309
|
2024-11-21 14:47 |
2021-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197213
|
9.1 |
CRITICAL
Network
|
prestashop
|
prestashop
|
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes custo…
|
-
|
CVE-2021-21308
|
2024-11-21 14:47 |
2021-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197214
|
7.2 |
HIGH
Network
|
prestashop
|
prestashop
|
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. T…
|
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
|
CVE-2021-21302
|
2024-11-21 14:47 |
2021-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197215
|
6.5 |
MEDIUM
Network
|
matrix fedoraproject
|
synapse fedora
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a mal…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-21274
|
2024-11-21 14:47 |
2021-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197216
|
6.1 |
MEDIUM
Network
|
matrix fedoraproject
|
synapse fedora
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, reque…
|
CWE-601
Open Redirect
|
CVE-2021-21273
|
2024-11-21 14:47 |
2021-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197217
|
6.5 |
MEDIUM
Network
|
nodered
|
node-red
|
Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the Projects API. If the …
|
-
|
CVE-2021-21298
|
2024-11-21 14:47 |
2021-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197218
|
6.5 |
MEDIUM
Network
|
nodered
|
node-red
|
Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A badly formed request c…
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2021-21297
|
2024-11-21 14:47 |
2021-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197219
|
7.8 |
HIGH
Local
|
adobe
|
bridge
|
Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Ex…
|
-
|
CVE-2021-21066
|
2024-11-21 14:47 |
2021-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197220
|
7.8 |
HIGH
Local
|
adobe
|
bridge
|
Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Ex…
|
-
|
CVE-2021-21065
|
2024-11-21 14:47 |
2021-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|