|
196001
|
7.5 |
HIGH
Network
|
emerson
|
x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware
|
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may all…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2021-27457
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196002
|
5.9 |
MEDIUM
Network
|
couchbase
|
couchbase_server
|
An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files …
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2021-27924
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196003
|
4.4 |
MEDIUM
Network
|
couchbase
|
couchbase_server
|
An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal …
|
CWE-362
Race Condition
|
CVE-2021-27925
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196004
|
9.8 |
CRITICAL
Network
|
belden
|
hirschmann_hios hisecos
|
Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the credentials of existing users.
|
CWE-287
Improper Authentication
|
CVE-2021-27734
|
2024-11-21 14:58 |
2021-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196005
|
7.5 |
HIGH
Network
|
apache
|
traffic_server
|
Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.
|
NVD-CWE-noinfo
|
CVE-2021-27737
|
2024-11-21 14:58 |
2021-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196006
|
6.5 |
MEDIUM
Network
|
sap
|
commerce
|
SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be displayed to them. Although the search re…
|
NVD-CWE-Other
|
CVE-2021-27619
|
2024-11-21 14:58 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196007
|
4.9 |
MEDIUM
Network
|
sap
|
netweaver_process_integration
|
The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the file uploaded from local source. An att…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2021-27618
|
2024-11-21 14:58 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196008
|
4.9 |
MEDIUM
Network
|
sap
|
netweaver_process_integration
|
The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document uploaded from local source. An attacke…
|
CWE-20
Improper Input Validation
|
CVE-2021-27617
|
2024-11-21 14:58 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196009
|
7.8 |
HIGH
Local
|
sap
|
business_one business-one-hana-chef-cookbook
|
Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an attacker to exploit an insecure temp…
|
NVD-CWE-noinfo
|
CVE-2021-27616
|
2024-11-21 14:58 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196010
|
7.1 |
HIGH
Local
|
sap
|
business_one business-one-hana-chef-cookbook
|
SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application…
|
CWE-74
Injection
|
CVE-2021-27614
|
2024-11-21 14:58 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|