|
200711
|
6.8 |
MEDIUM
Network
|
samba
debian
redhat
|
samba
debian_linux
virtualization_host
enterprise_linux
enterprise_linux_eus
enterprise_linux_tus
enterprise_linux_aus
|
A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of t…
|
CWE-362
Race Condition
|
CVE-2021-20316
|
2024-11-21 14:46 |
2022-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200712
|
7.5 |
HIGH
Network
|
openexr
|
openexr
|
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest thre…
|
-
|
CVE-2021-20304
|
2024-11-21 14:46 |
2022-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200713
|
7.5 |
HIGH
Network
|
openexr
debian
|
openexr
debian_linux
|
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest th…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-20298
|
2024-11-21 14:46 |
2022-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200714
|
3.3 |
LOW
Local
|
ibm
|
jazz_team_server
|
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 199149.
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2021-20551
|
2024-11-21 14:46 |
2022-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200715
|
4.3 |
MEDIUM
Network
|
ibm
|
jazz_team_server
|
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system,…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2021-20544
|
2024-11-21 14:46 |
2022-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200716
|
5.4 |
MEDIUM
Network
|
ibm
|
jazz_team_server
|
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's We…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20543
|
2024-11-21 14:46 |
2022-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200717
|
4.3 |
MEDIUM
Network
|
ibm
|
jazz_team_server
|
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system,…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2021-20421
|
2024-11-21 14:46 |
2022-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200718
|
5.3 |
MEDIUM
Network
|
ibm
|
jazz_team_server
|
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could explo…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2021-20355
|
2024-11-21 14:46 |
2022-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200719
|
7.5 |
HIGH
Network
|
ibm
|
cloud_pak_system
|
IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 19749…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2021-20479
|
2024-11-21 14:46 |
2022-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200720
|
6.5 |
MEDIUM
Network
|
ibm
netapp
|
cognos_analytics
oncommand_insight
|
IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813.
|
CWE-776
XML Entity Expansion
|
CVE-2021-20464
|
2024-11-21 14:46 |
2022-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
