PUBLIÉES EN
novembre 2021
32 CVE, des plus récentes aux plus anciennes.
CVE-2021-42117Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an authenticated remote attacker with Object…
3.5 FAIBLE
CVE-2021-43220Microsoft Edge for iOS Spoofing Vulnerability
3.1 FAIBLE
CVE-2021-42308Microsoft Edge (Chromium-based) Spoofing Vulnerability
3.1 FAIBLE
CVE-2021-32004This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoni…
3.7 FAIBLE
CVE-2019-5640Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect ele…
3.3 FAIBLE
CVE-2021-36319Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP a…
3.3 FAIBLE
CVE-2021-42525Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this v…
3.3 FAIBLE
CVE-2021-37939It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public…
2.7 FAIBLE
CVE-2021-41190The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, …
3.0 FAIBLE
CVE-2021-43553PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.
3.1 FAIBLE
CVE-2021-43273An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verificatio…
3.3 FAIBLE
CVE-2021-38973IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are requi…
2.7 FAIBLE
CVE-2021-37910ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect ot…
3.7 FAIBLE
CVE-2021-34421The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiv…
3.7 FAIBLE
CVE-2021-34419In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a remote control request to a user in the process of in-meeting …
3.7 FAIBLE
CVE-2021-42323Azure RTOS Information Disclosure Vulnerability
3.3 FAIBLE
CVE-2021-42301Azure RTOS Information Disclosure Vulnerability
3.3 FAIBLE
CVE-2021-41376Azure Sphere Information Disclosure Vulnerability
2.3 FAIBLE
CVE-2021-26444Azure RTOS Information Disclosure Vulnerability
3.3 FAIBLE
CVE-2021-34685UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of …
2.7 FAIBLE
CVE-2021-25505Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.
3.3 FAIBLE
CVE-2021-39911An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4…
1.7 FAIBLE
CVE-2021-39901In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoint.
2.7 FAIBLE
CVE-2021-39898In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.
3.7 FAIBLE
CVE-2021-39897Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent group to still have access even after the s…
2.6 FAIBLE
CVE-2021-39914A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of resources when a specially crafted userna…
3.1 FAIBLE
CVE-2021-41247JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incompl…
3.5 FAIBLE
CVE-2021-23472This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML …
3.1 FAIBLE
CVE-2021-43264In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files v…
3.3 FAIBLE
CVE-2021-42754An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the …
3.2 FAIBLE
CVE-2021-41019An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options…
3.5 FAIBLE
CVE-2021-36181A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow…
3.1 FAIBLE