|
197811
|
5.3 |
MEDIUM
Network
|
ibm
|
planning_analytics
|
IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain …
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2021-20526
|
2024-11-21 14:46 |
2021-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197812
|
7.5 |
HIGH
Network
|
mitsubishielectric
|
r08sfcpu_firmware r16sfcpu_firmware r32sfcpu_firmware r120sfcpu_firmware r08psfcpu_firmware r16psfcpu_firmware r32psfcpu_firmware r120psfcpu_firmware
|
Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and M…
|
-
|
CVE-2021-20599
|
2024-11-21 14:46 |
2021-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197813
|
5.9 |
MEDIUM
Network
|
mitsubishielectric
|
r12ccpu-v_firmware
|
Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-o…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-20600
|
2024-11-21 14:46 |
2021-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197814
|
7.5 |
HIGH
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397.
|
NVD-CWE-Other
|
CVE-2021-20584
|
2024-11-21 14:46 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197815
|
5.4 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20571
|
2024-11-21 14:46 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197816
|
6.1 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20561
|
2024-11-21 14:46 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197817
|
4.3 |
MEDIUM
Network
|
ibm
|
sterling_file_gateway
|
IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information co…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2021-20552
|
2024-11-21 14:46 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197818
|
8.8 |
HIGH
Network
|
ibm
|
sterling_file_gateway
|
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that …
|
CWE-352
Origin Validation Error
|
CVE-2021-20489
|
2024-11-21 14:46 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197819
|
6.1 |
MEDIUM
Network
|
ibm
|
sterling_file_gateway
|
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20481
|
2024-11-21 14:46 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197820
|
6.5 |
MEDIUM
Network
|
ibm
|
sterling_file_gateway
|
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Forc…
|
CWE-613
Insufficient Session Expiration
|
CVE-2021-20473
|
2024-11-21 14:46 |
2021-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|