|
199781
|
4.3 |
MEDIUM
Network
|
jenkins
|
jenkins
|
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permissi…
|
-
|
CVE-2021-21670
|
2024-11-21 14:48 |
2021-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199782
|
7.5 |
HIGH
Local
|
dell
|
alienware_m15_r6_firmware chengming_3990_firmware chengming_3991_firmware g15_5510_firmware g15_5511_firmware g3_3500_firmware g5_5500_firmware g7_7500_firmware g7_7700_firmwa…
|
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-21574
|
2024-11-21 14:48 |
2021-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199783
|
7.5 |
HIGH
Local
|
dell
|
alienware_m15_r6_firmware chengming_3990_firmware chengming_3991_firmware g15_5510_firmware g15_5511_firmware g3_3500_firmware g5_5500_firmware g7_7500_firmware g7_7700_firmwa…
|
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-21573
|
2024-11-21 14:48 |
2021-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199784
|
7.5 |
HIGH
Local
|
dell
|
alienware_m15_r6_firmware chengming_3990_firmware chengming_3991_firmware g15_5510_firmware g15_5511_firmware g3_3500_firmware g5_5500_firmware g7_7500_firmware g7_7700_firmwa…
|
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-21572
|
2024-11-21 14:48 |
2021-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199785
|
6.5 |
MEDIUM
Network
|
dell
|
alienware_m15_r6_firmware chengming_3990_firmware chengming_3991_firmware g15_5510_firmware g15_5511_firmware g3_3500_firmware g5_5500_firmware g7_7500_firmware g7_7700_firmwa…
|
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may explo…
|
CWE-295
Improper Certificate Validation
|
CVE-2021-21571
|
2024-11-21 14:48 |
2021-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199786
|
7.5 |
HIGH
Network
|
zte
|
zxv10_b860h_v5.0_firmware
|
A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with th…
|
CWE-276
Incorrect Default Permissions
|
CVE-2021-21737
|
2024-11-21 14:48 |
2021-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199787
|
6.1 |
MEDIUM
Network
|
mongo-express_project
|
mongo-express
|
mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a…
|
-
|
CVE-2021-21422
|
2024-11-21 14:48 |
2021-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199788
|
9.1 |
CRITICAL
Network
|
contiki-ng
|
contiki-ng
|
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and pri…
|
-
|
CVE-2021-21410
|
2024-11-21 14:48 |
2021-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199789
|
9.8 |
CRITICAL
Network
|
jenkins
|
generic_webhook_trigger
|
Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
|
-
|
CVE-2021-21669
|
2024-11-21 14:48 |
2021-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199790
|
10.0 |
CRITICAL
Network
|
opener_project
|
opener
|
An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead …
|
CWE-125
Out-of-bounds Read
|
CVE-2021-21777
|
2024-11-21 14:48 |
2021-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|