|
195421
|
5.9 |
MEDIUM
Network
|
nextcloud debian
|
desktop debian_linux
|
Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow.
|
CWE-295
Improper Certificate Validation
|
CVE-2021-22895
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195422
|
4.3 |
MEDIUM
Network
|
schneider-electric
|
easergy_t300_firmware
|
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an att…
|
-
|
CVE-2021-22769
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195423
|
9.8 |
CRITICAL
Network
|
schneider-electric
|
powerlogic_egx100_firmware powerlogic_egx300_firmware
|
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code executi…
|
-
|
CVE-2021-22768
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195424
|
3.1 |
LOW
Network
|
haxx debian fedoraproject oracle siemens splunk
|
curl debian_linux fedora mysql_server essbase communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_network_repository_function commu…
|
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers…
|
CWE-909
Missing Initialization of Resource
|
CVE-2021-22898
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195425
|
5.3 |
MEDIUM
Network
|
haxx oracle netapp siemens splunk
|
curl mysql_server essbase communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_network_repository_function communications_cloud_native_cor…
|
curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The s…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2021-22897
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195426
|
9.8 |
CRITICAL
Network
|
schneider-electric
|
powerlogic_egx100_firmware powerlogic_egx300_firmware
|
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code executi…
|
-
|
CVE-2021-22767
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195427
|
7.5 |
HIGH
Network
|
schneider-electric
|
powerlogic_egx100_firmware powerlogic_egx300_firmware
|
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially crafte…
|
-
|
CVE-2021-22766
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195428
|
9.8 |
CRITICAL
Network
|
schneider-electric
|
powerlogic_egx100_firmware powerlogic_egx300_firmware
|
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code executi…
|
CWE-20
Improper Input Validation
|
CVE-2021-22765
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195429
|
7.8 |
HIGH
Local
|
schneider-electric
|
interactive_graphical_scada_system
|
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in remote code execution, when a malic…
|
CWE-22
Path Traversal
|
CVE-2021-22762
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195430
|
7.8 |
HIGH
Local
|
schneider-electric
|
interactive_graphical_scada_system
|
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of informat…
|
-
|
CVE-2021-22761
|
2024-11-21 14:50 |
2021-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|