|
195991
|
5.5 |
MEDIUM
Local
|
arm
|
trusted_firmware_m
|
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mod…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-27562
|
2024-11-21 14:58 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195992
|
7.5 |
HIGH
Network
|
mediateknet
|
netwave_system
|
An information disclosure vulnerability was discovered in /index.class.php (via port 8181) on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the sy…
|
NVD-CWE-noinfo
|
CVE-2021-27823
|
2024-11-21 14:58 |
2021-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195993
|
6.1 |
MEDIUM
Network
|
openwrt
|
luci
|
The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution.
|
CWE-79
Cross-site Scripting
|
CVE-2021-27821
|
2024-11-21 14:58 |
2021-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195994
|
7.2 |
HIGH
Network
|
qibosoft
|
qibosoft
|
A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation of client_upgrade_edition.php and Upgrad…
|
CWE-94
Code Injection
|
CVE-2021-27811
|
2024-11-21 14:58 |
2021-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195995
|
6.1 |
MEDIUM
Network
|
zohocorp
|
manageengine_adselfservice_plus
|
Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.
|
CWE-79
Cross-site Scripting
|
CVE-2021-27956
|
2024-11-21 14:58 |
2021-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195996
|
6.1 |
MEDIUM
Network
|
emerson
|
x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware
|
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page pr…
|
-
|
CVE-2021-27467
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195997
|
6.1 |
MEDIUM
Network
|
emerson
|
x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware
|
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbit…
|
-
|
CVE-2021-27465
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195998
|
5.3 |
MEDIUM
Network
|
emerson
|
x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware
|
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properl…
|
-
|
CVE-2021-27463
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195999
|
7.5 |
HIGH
Network
|
emerson
|
x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware
|
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using speciall…
|
-
|
CVE-2021-27461
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196000
|
9.8 |
CRITICAL
Network
|
emerson
|
x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware
|
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker coul…
|
-
|
CVE-2021-27459
|
2024-11-21 14:58 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|