Lucene search
+L

6 matches found

Snyk
Snyk
•added 2022/09/08 11:24 a.m.•8 views

Malicious Package

Overview daas-reports-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2022/01/27 3:00 p.m.•8 views

CVE-2021-44793

Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to...

8.6CVSS7.4AI score0.01187EPSS
SaveExploits0References3
OSV
OSV
•added 2022/01/27 1:15 p.m.•14 views

CVE-2021-44793

Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to...

8.6CVSS5.9AI score0.01187EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/27 12:00 a.m.•3 views

CVE-2021-44793: Missing Authorization

Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to...

8.6CVSS8AI score0.01187EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/04 11:15 a.m.•12 views

CVE-2021-36483

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...

8.8CVSS7.6AI score0.02899EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/08/04 11:15 a.m.•10 views

CVE-2021-36483

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...

8.8CVSS7.5AI score0.02899EPSS
SaveExploits0References7
Rows per page
Query Builder