|
195581
|
6.7 |
MEDIUM
Local
|
tenable
|
nessus
|
Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaini…
|
NVD-CWE-noinfo
|
CVE-2021-20079
|
2024-11-21 14:45 |
2021-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195582
|
6.1 |
MEDIUM
Network
|
machform
|
machform
|
Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.
|
CWE-601
Open Redirect
|
CVE-2021-20105
|
2024-11-21 14:45 |
2021-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195583
|
8.1 |
HIGH
Network
|
machform
|
machform
|
Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2021-20104
|
2024-11-21 14:45 |
2021-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195584
|
6.1 |
MEDIUM
Network
|
machform
|
machform
|
Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php.
|
CWE-79
Cross-site Scripting
|
CVE-2021-20103
|
2024-11-21 14:45 |
2021-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195585
|
8.8 |
HIGH
Network
|
machform
|
machform
|
Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.
|
CWE-352
Origin Validation Error
|
CVE-2021-20102
|
2024-11-21 14:45 |
2021-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195586
|
6.1 |
MEDIUM
Network
|
machform
|
machform
|
Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content.
|
CWE-74
Injection
|
CVE-2021-20101
|
2024-11-21 14:45 |
2021-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195587
|
6.7 |
MEDIUM
Local
|
tenable
|
nessus
|
Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows ex…
|
NVD-CWE-noinfo
|
CVE-2021-20100
|
2024-11-21 14:45 |
2021-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195588
|
6.7 |
MEDIUM
Local
|
tenable
|
nessus
|
Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows ex…
|
NVD-CWE-noinfo
|
CVE-2021-20099
|
2024-11-21 14:45 |
2021-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195589
|
7.5 |
HIGH
Network
|
sonicwall
|
sonicos sonicosv
|
A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2021-20019
|
2024-11-21 14:45 |
2021-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195590
|
7.5 |
HIGH
Network
|
wibu siemens
|
codemeter pss_cape sicam_230_firmware
|
A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server.
|
CWE-125
Out-of-bounds Read
|
CVE-2021-20094
|
2024-11-21 14:45 |
2021-06-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|