|
195131
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_application_security_manager big-ip_domain_name_system …
|
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel (TMM) may stop responding…
|
NVD-CWE-noinfo
|
CVE-2021-23013
|
2024-11-21 14:51 |
2021-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195132
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_application_security_manager big-ip_domain_name_system …
|
On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet frag…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-23011
|
2024-11-21 14:51 |
2021-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195133
|
9.8 |
CRITICAL
Network
|
f5
|
big-ip_access_policy_manager
|
On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD (Active Directory) authentication can be bypas…
|
CWE-287
Improper Authentication
|
CVE-2021-23008
|
2024-11-21 14:51 |
2021-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195134
|
9.8 |
CRITICAL
Network
|
handlebarsjs netapp
|
handlebars e-series_performance_analyzer
|
The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2021-23383
|
2024-11-21 14:51 |
2021-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195135
|
7.5 |
HIGH
Network
|
path-parse_project
|
path-parse
|
All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-…
|
NVD-CWE-noinfo
|
CVE-2021-23343
|
2024-11-21 14:51 |
2021-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195136
|
5.3 |
MEDIUM
Network
|
browserslist_project
|
browserslist
|
The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.
|
CWE-1333
Inefficient Regular Expression Complexity
|
CVE-2021-23364
|
2024-11-21 14:51 |
2021-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195137
|
7.5 |
HIGH
Network
|
postcss
|
postcss
|
The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused …
|
CWE-1333
Inefficient Regular Expression Complexity
|
CVE-2021-23382
|
2024-11-21 14:51 |
2021-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195138
|
9.1 |
CRITICAL
Network
|
tyk
|
tyk-identity-broker
|
The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the X…
|
CWE-287
Improper Authentication
|
CVE-2021-23365
|
2024-11-21 14:51 |
2021-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195139
|
9.8 |
CRITICAL
Network
|
killing_project
|
killing
|
This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec fu…
|
CWE-78
OS Command
|
CVE-2021-23381
|
2024-11-21 14:51 |
2021-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195140
|
7.3 |
HIGH
Network
|
roar-pidusage_project
|
roar-pidusage
|
This affects all versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of this package on certain operating systems, it is possible for an attacker to exe…
|
CWE-78
OS Command
|
CVE-2021-23380
|
2024-11-21 14:51 |
2021-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|