Lucene search
+L

2127 matches found

NVD
NVD
added 2021/04/09 6:15 p.m.45 views

CVE-2021-25374

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O8.1 and below, and 3.9.00.9 in Android P9.0 and above allows remote attackers to access a user data related with Samsung Account...

8.6CVSS0.03072EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/09 6:15 p.m.12 views

CVE-2021-25374

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O8.1 and below, and 3.9.00.9 in Android P9.0 and above allows remote attackers to access a user data related with Samsung Account...

7.5CVSS5.8AI score0.03072EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/04/09 6:15 p.m.5 views

CVE-2021-25374

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O8.1 and below, and 3.9.00.9 in Android P9.0 and above allows remote attackers to access a user data related with Samsung Account...

8.6CVSS7.4AI score0.03072EPSS
SaveExploits0References3
Prion
Prion
added 2021/04/09 6:15 p.m.28 views

Authorization

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O8.1 and below, and 3.9.00.9 in Android P9.0 and above allows remote attackers to access a user data related with Samsung Account...

5CVSS7.4AI score0.03072EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/09 5:38 p.m.104 views

CVE-2021-25374

The CVE-2021-25374 entry refers to an improper authorization vulnerability in Samsung Members deeplink scheme "samsungrewards". Affected are Samsung Members in versions 2.4.83.9 (Android O 8.1 and below) and 3.9.00.9 (Android P 9.0 and above). The issue potentially allows remote attackers to acce...

8.6CVSS7.3AI score0.03072EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/09 5:38 p.m.39 views

CVE-2021-25374

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O8.1 and below, and 3.9.00.9 in Android P9.0 and above allows remote attackers to access a user data related with Samsung Account...

8.6CVSS8.5AI score0.03072EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/04/02 11:31 a.m.28 views

CVE-2021-25894

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting XSS vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter...

6AI score0.0111EPSS
SaveExploits1References3
NVD
NVD
added 2021/04/01 3:15 a.m.20 views

CVE-2020-36286

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly...

5.3CVSS0.0141EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/01 3:15 a.m.8 views

CVE-2020-36286

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly...

5.3CVSS6.1AI score0.0141EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/01 3:15 a.m.26 views

Denial of service

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly...

5CVSS5.2AI score0.0141EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
added 2021/04/01 3:10 a.m.48 views

CVE-2020-36286

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly...

5.1AI score0.0141EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/31 12:00 a.m.17 views

Atlassian Jira Server and Data Center 安全漏洞

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is a server version of a defect tracking management system. Atlassian JIRA Data Center is the data center version of Atlassian JIRA. Atlassian Jira Server and Data Center have an...

5.3CVSS5.6AI score0.0141EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/03/26 12:00 a.m.92 views

GitLab Access Control Error Vulnerability (CNVD-2021-22453)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab after version...

4.3CVSS6.5AI score0.01001EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/24 5:15 p.m.45 views

CVE-2021-22176

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests...

4.3CVSS0.01001EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/24 5:15 p.m.5 views

CVE-2021-22176

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests...

4.3CVSS5.8AI score0.01001EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/03/24 5:15 p.m.21 views

Improper access control

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests...

4CVSS4.3AI score0.01001EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/03/24 5:15 p.m.8 views

UBUNTU-CVE-2021-22176

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests...

4.3CVSS5.7AI score0.01001EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/03/24 4:46 p.m.83 views

CVE-2021-22176

Removed by vendor...

4.3CVSS5.8AI score0.01001EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/03/24 4:46 p.m.51 views

CVE-2021-22176

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests...

4.3CVSS4.6AI score0.01001EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/24 12:00 a.m.21 views

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab after version...

4.3CVSS5.2AI score0.01001EPSS
SaveExploits0References4
Rows per page
Query Builder