|
193911
|
8.6 |
HIGH
Local
|
amazon
|
kindle_firmware
|
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corrupti…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2021-30354
|
2024-11-21 15:03 |
2021-09-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193912
|
9.8 |
CRITICAL
Network
|
vscode-phpmd_project
|
vscode-phpmd
|
The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace fo…
|
NVD-CWE-noinfo
|
CVE-2021-30124
|
2024-11-21 15:03 |
2021-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193913
|
7.5 |
HIGH
Network
|
greyware
|
domain_time_ii
|
dttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed response to the UDP …
|
NVD-CWE-noinfo
|
CVE-2021-30110
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193914
|
6.1 |
MEDIUM
Network
|
sysaid
|
sysaid
|
SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.
|
CWE-79
Cross-site Scripting
|
CVE-2021-30049
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193915
|
9.9 |
CRITICAL
Network
|
oracle
|
secure_global_desktop
|
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low priv…
|
NVD-CWE-noinfo
|
CVE-2021-2447
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193916
|
9.6 |
CRITICAL
Network
|
oracle
|
secure_global_desktop
|
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthen…
|
NVD-CWE-noinfo
|
CVE-2021-2446
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193917
|
5.7 |
MEDIUM
Network
|
oracle
|
hyperion_infrastructure_technology
|
Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Difficult to exploit vulnerab…
|
NVD-CWE-noinfo
|
CVE-2021-2445
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193918
|
4.9 |
MEDIUM
Network
|
oracle netapp
|
mysql_server oncommand_insight
|
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privi…
|
NVD-CWE-noinfo
|
CVE-2021-2444
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193919
|
7.3 |
HIGH
Local
|
oracle
|
vm_virtualbox
|
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high p…
|
NVD-CWE-noinfo
|
CVE-2021-2443
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193920
|
6.0 |
MEDIUM
Local
|
oracle
|
vm_virtualbox
|
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high p…
|
NVD-CWE-noinfo
|
CVE-2021-2442
|
2024-11-21 15:03 |
2021-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|