Lucene search
+L

5 matches found

Snyk
Snyk
added 2022/09/08 11:24 a.m.5 views

Malicious Package

Overview daas-reports-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/01/27 3:0 p.m.4 views

CVE-2021-44793

Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to...

8.6CVSS7.4AI score0.01367EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/27 1:15 p.m.5 views

CVE-2021-44793

Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to...

8.6CVSS5.9AI score0.01367EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/04 11:15 a.m.7 views

CVE-2021-36483

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...

8.8CVSS7.6AI score0.02899EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2021/08/04 11:15 a.m.4 views

CVE-2021-36483

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...

8.8CVSS7.5AI score0.02899EPSS
SaveExploits0References7
Rows per page
Query Builder