|
195381
|
5.5 |
MEDIUM
Local
|
iobit
|
advanced_systemcare_ultimate
|
An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet (IRP) c…
|
NVD-CWE-Other
|
CVE-2021-21790
|
2024-11-21 14:48 |
2021-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195382
|
5.5 |
MEDIUM
Local
|
iobit
|
advanced_systemcare_ultimate
|
An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lead to a disclosure…
|
NVD-CWE-Other
|
CVE-2021-21785
|
2024-11-21 14:48 |
2021-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195383
|
4.6 |
MEDIUM
Physics
|
zte
|
zxctn_6120h_firmware
|
A ZTE's product of the transport network access layer has a security vulnerability. Because the system does not sufficiently verify the data reliability, attackers could replace an authenticated opti…
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2021-21739
|
2024-11-21 14:48 |
2021-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195384
|
6.1 |
MEDIUM
Network
|
zte
|
zxiptv_firmware
|
ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the…
|
CWE-79
Cross-site Scripting
|
CVE-2021-21738
|
2024-11-21 14:48 |
2021-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195385
|
6.1 |
MEDIUM
Network
|
dell
|
emc_idrac9_firmware
|
Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a vict…
|
CWE-79
Cross-site Scripting
|
CVE-2021-21581
|
2024-11-21 14:48 |
2021-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195386
|
4.3 |
MEDIUM
Network
|
dell
|
emc_idrac8_firmware emc_idrac9_firmware
|
Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized …
|
CWE-74
Injection
|
CVE-2021-21580
|
2024-11-21 14:48 |
2021-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195387
|
6.1 |
MEDIUM
Network
|
dell
|
emc_idrac9_firmware
|
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricki…
|
CWE-601
Open Redirect
|
CVE-2021-21579
|
2024-11-21 14:48 |
2021-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195388
|
6.1 |
MEDIUM
Network
|
dell
|
emc_idrac9_firmware
|
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricki…
|
CWE-601
Open Redirect
|
CVE-2021-21578
|
2024-11-21 14:48 |
2021-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195389
|
6.1 |
MEDIUM
Network
|
dell
|
emc_idrac9_firmware
|
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript…
|
CWE-79
Cross-site Scripting
|
CVE-2021-21577
|
2024-11-21 14:48 |
2021-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195390
|
6.1 |
MEDIUM
Network
|
dell
|
emc_idrac9_firmware
|
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript…
|
CWE-79
Cross-site Scripting
|
CVE-2021-21576
|
2024-11-21 14:48 |
2021-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|