|
197381
|
6.4 |
MEDIUM
Local
|
linux redhat
|
linux_kernel enterprise_linux
|
A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on th…
|
-
|
CVE-2021-20261
|
2024-11-21 14:46 |
2021-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197382
|
5.4 |
MEDIUM
Network
|
ibm
|
tivoli_netcool\/omnibus_webgui
|
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20336
|
2024-11-21 14:46 |
2021-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197383
|
6.5 |
MEDIUM
Network
|
libjpeg-turbo fedoraproject
|
libjpeg-turbo fedora
|
Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image.
|
CWE-369
Divide By Zero
|
CVE-2021-20205
|
2024-11-21 14:46 |
2021-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197384
|
5.5 |
MEDIUM
Local
|
linux oracle
|
linux_kernel tekelec_platform_distribution
|
A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the sys…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2021-20265
|
2024-11-21 14:46 |
2021-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197385
|
4.8 |
MEDIUM
Network
|
weseek
|
growi
|
Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote authenticated attackers to inject an arbitrary script via unspecified vecto…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20673
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197386
|
6.1 |
MEDIUM
Network
|
weseek
|
growi
|
Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitr…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20672
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197387
|
7.2 |
HIGH
Network
|
weseek
|
growi
|
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code ex…
|
CWE-20
Improper Input Validation
|
CVE-2021-20671
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197388
|
7.5 |
HIGH
Network
|
weseek
|
growi
|
Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via un…
|
NVD-CWE-Other
|
CVE-2021-20670
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197389
|
4.7 |
MEDIUM
Network
|
weseek
|
growi
|
Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL.
|
CWE-22
Path Traversal
|
CVE-2021-20669
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197390
|
2.7 |
LOW
Network
|
weseek
|
growi
|
Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafted URL.
|
CWE-22
Path Traversal
|
CVE-2021-20668
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|