|
197311
|
7.8 |
HIGH
Local
|
hpe
|
cloudline_cl3100_gen10_server_firmware cloudline_cl4100_gen10_server_firmware cloudline_cl5200_gen9_server_firmware cloudline_cl5800_gen10_server_firmware cloudline_cl5800_gen9_server_fir…
|
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5…
|
CWE-22
Path Traversal
|
CVE-2021-25125
|
2024-11-21 14:54 |
2021-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197312
|
7.8 |
HIGH
Local
|
hpe
|
cloudline_cl3100_gen10_server_firmware cloudline_cl4100_gen10_server_firmware cloudline_cl5200_gen9_server_firmware cloudline_cl5800_gen10_server_firmware cloudline_cl5800_gen9_server_fir…
|
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5…
|
CWE-22
Path Traversal
|
CVE-2021-25124
|
2024-11-21 14:54 |
2021-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197313
|
7.8 |
HIGH
Local
|
hpe
|
cloudline_cl5800_gen10_server_firmware cloudline_cl3100_gen10_server_firmware cloudline_cl4100_gen10_server_firmware cloudline_cl5200_gen9_server_firmware cloudline_cl5800_gen9_server_fir…
|
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5…
|
CWE-120
Classic Buffer Overflow
|
CVE-2021-25123
|
2024-11-21 14:54 |
2021-01-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197314
|
7.8 |
HIGH
Local
|
trendmicro
|
housecall_for_home_networks
|
A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execu…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2021-25247
|
2024-11-21 14:54 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197315
|
5.5 |
MEDIUM
Local
|
trendmicro
|
serverprotect
|
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-25226
|
2024-11-21 14:54 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197316
|
5.5 |
MEDIUM
Local
|
trendmicro
|
serverprotect
|
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-25225
|
2024-11-21 14:54 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197317
|
5.5 |
MEDIUM
Local
|
trendmicro
|
serverprotect
|
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-25224
|
2024-11-21 14:54 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197318
|
8.8 |
HIGH
Network
|
wisc
|
htcondor
|
HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2021-25312
|
2024-11-21 14:54 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197319
|
9.9 |
CRITICAL
Network
|
wisc
|
htcondor
|
condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by ro…
|
CWE-22
Path Traversal
|
CVE-2021-25311
|
2024-11-21 14:54 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197320
|
6.1 |
MEDIUM
Network
|
misp
|
misp
|
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs.
|
CWE-79
Cross-site Scripting
|
CVE-2021-25325
|
2024-11-21 14:54 |
2021-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|