|
195281
|
6.5 |
MEDIUM
Network
|
mozilla
|
firefox thunderbird firefox_esr
|
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRT…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2021-23982
|
2024-11-21 14:52 |
2021-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195282
|
8.1 |
HIGH
Network
|
mozilla
|
firefox thunderbird firefox_esr
|
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information lea…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-23981
|
2024-11-21 14:52 |
2021-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195283
|
6.5 |
MEDIUM
Network
|
mozilla
|
firefox
|
If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could have been enabled in a way that was unno…
|
NVD-CWE-Other
|
CVE-2021-23985
|
2024-11-21 14:52 |
2021-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195284
|
4.8 |
MEDIUM
Network
|
mcafee
|
epolicy_orchestrator
|
Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the admi…
|
CWE-79
Cross-site Scripting
|
CVE-2021-23889
|
2024-11-21 14:52 |
2021-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195285
|
6.3 |
MEDIUM
Network
|
mcafee
|
epolicy_orchestrator
|
Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which …
|
CWE-601
Open Redirect
|
CVE-2021-23888
|
2024-11-21 14:52 |
2021-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195286
|
6.5 |
MEDIUM
Network
|
mcafee
|
epolicy_orchestrator
|
Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages (specifically McAfe…
|
CWE-200
Information Exposure
|
CVE-2021-23890
|
2024-11-21 14:52 |
2021-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195287
|
8.8 |
HIGH
Network
|
webnus
|
modern_events_calendar_lite
|
Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mec[post_id] POST parameter in the mec_fes_form AJAX action when logged in as an au…
|
CWE-89
SQL Injection
|
CVE-2021-24149
|
2024-11-21 14:52 |
2021-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195288
|
9.8 |
CRITICAL
Network
|
inspireui
|
mstore_api
|
A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cook…
|
CWE-287
Improper Authentication
|
CVE-2021-24148
|
2024-11-21 14:52 |
2021-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195289
|
5.4 |
MEDIUM
Network
|
webnus
|
modern_events_calendar_lite
|
Unvalidated input and lack of output encoding in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not sanitise the mic_comment field (Notes on time) when adding/editing a…
|
CWE-79
Cross-site Scripting
|
CVE-2021-24147
|
2024-11-21 14:52 |
2021-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195290
|
7.5 |
HIGH
Network
|
webnus
|
modern_events_calendar_lite
|
Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to expor…
|
CWE-862
Missing Authorization
|
CVE-2021-24146
|
2024-11-21 14:52 |
2021-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|