|
195131
|
7.8 |
HIGH
Local
|
siemens hornerautomation
|
cscape
|
Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerabi…
|
CWE-125
Out-of-bounds Read
|
CVE-2021-22663
|
2024-11-21 14:50 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195132
|
9.8 |
CRITICAL
Network
|
microfocus
|
operation_bridge_reporter
|
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR ser…
|
CWE-78
OS Command
|
CVE-2021-22502
|
2024-11-21 14:50 |
2021-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195133
|
6.5 |
MEDIUM
Network
|
microfocus
|
application_performance_management
|
Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick t…
|
CWE-352
Origin Validation Error
|
CVE-2021-22500
|
2024-11-21 14:50 |
2021-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195134
|
4.8 |
MEDIUM
Network
|
microfocus
|
application_performance_management
|
Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack.
|
CWE-79
Cross-site Scripting
|
CVE-2021-22499
|
2024-11-21 14:50 |
2021-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195135
|
6.1 |
MEDIUM
Network
|
revive-adserver
|
revive_adserver
|
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2021-22875
|
2024-11-21 14:50 |
2021-01-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195136
|
6.1 |
MEDIUM
Network
|
revive-adserver
|
revive_adserver
|
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2021-22874
|
2024-11-21 14:50 |
2021-01-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195137
|
7.8 |
HIGH
Local
|
fujielectric
|
v-server v-simulator
|
Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code executio…
|
CWE-125
Out-of-bounds Read
|
CVE-2021-22655
|
2024-11-21 14:50 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195138
|
7.8 |
HIGH
Local
|
fujielectric
|
v-server v-simulator
|
Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code executi…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-22653
|
2024-11-21 14:50 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195139
|
7.8 |
HIGH
Local
|
fujielectric
|
v-server v-simulator
|
A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-22641
|
2024-11-21 14:50 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195140
|
7.8 |
HIGH
Local
|
fujielectric
|
v-server v-simulator
|
An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on …
|
CWE-824
Access of Uninitialized Pointer
|
CVE-2021-22639
|
2024-11-21 14:50 |
2021-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|