|
195611
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_domain_name_system
|
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM based cross-site scripting (XSS) vulnerability exists…
|
CWE-79
Cross-site Scripting
|
CVE-2021-23041
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195612
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager
|
On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenti…
|
CWE-601
Open Redirect
|
CVE-2021-23052
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195613
|
5.3 |
MEDIUM
Network
|
f5
|
big-ip_advanced_web_application_firewall big-ip_application_security_manager
|
On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection feature of BIG-IP Advanced WAF or BIG-IP ASM is enabled on a virtual server and th…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-23053
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195614
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_acceleration_manager big-ip_application_secur…
|
On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS) systems, undisclosed reque…
|
NVD-CWE-noinfo
|
CVE-2021-23051
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195615
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_security_manager big-ip_advanced_web_application_firewall nginx_app_protect
|
On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, when a cross-site request forgery (CSRF)-enabled poli…
|
NVD-CWE-noinfo
|
CVE-2021-23050
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195616
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_accelerat…
|
On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an increase in Traffic Manag…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-23049
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195617
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system …
|
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol (GTP) iRules comm…
|
NVD-CWE-noinfo
|
CVE-2021-23048
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195618
|
6.1 |
MEDIUM
Network
|
thoughtbot
|
clearance
|
This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If the value used for return_to contains multiple leadi…
|
CWE-601
Open Redirect
|
CVE-2021-23435
|
2024-11-21 14:51 |
2021-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195619
|
9.8 |
CRITICAL
Network
|
set-value_project oracle
|
set-value communications_cloud_native_core_policy
|
This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arra…
|
CWE-843
Type Confusion
|
CVE-2021-23440
|
2024-11-21 14:51 |
2021-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195620
|
8.8 |
HIGH
Network
|
sqlite-web_project
|
sqlite-web
|
This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable…
|
CWE-352
Origin Validation Error
|
CVE-2021-23404
|
2024-11-21 14:51 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|