CVE-2021-21343
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik Açıkları
Güvenlik Açıkları
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2021-21344
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability […]
İçeriği inceleyinCVE-2021-21345
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability […]
İçeriği inceleyinCVE-2020-9206
The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability […]
İçeriği inceleyinCVE-2020-9212
There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to […]
İçeriği inceleyinCVE-2020-9213
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, […]
İçeriği inceleyinCVE-2020-9213 (ngfw_module_firmware, nip6300_firmware, nip6600_firmware, nip6800_firmware, secospace_usg6300_firmware, secospace_usg6500_firmware, secospace_usg6600_firmware, usg9500_firmware)
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, […]
İçeriği inceleyinCVE-2020-4882
IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from user-controlled data . This […]
İçeriği inceleyinCVE-2020-4882 (planning_analytics)
IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from user-controlled data . This […]
İçeriği inceleyinCVE-2020-28501
This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators. Devamını Oku
İçeriği inceleyinCVE-2020-28501 (crawlerdetect)
This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators. Devamını Oku
İçeriği inceleyinCVE-2020-13963
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for […]
İçeriği inceleyin