Lucene search
+L

13110 matches found

NVD
NVD
•added 2021/06/22 3:15 p.m.•28 views

CVE-2021-34428

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being...

3.6CVSS0.00963EPSS
SaveExploits1References12
OSV
OSV
•added 2021/06/22 3:15 p.m.•8 views

DEBIAN-CVE-2021-34428

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being...

3.5CVSS6.3AI score0.00963EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2021/06/22 3:15 p.m.•57 views

CVE-2021-34428

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being...

3.6CVSS6.8AI score0.00963EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/06/22 3:15 p.m.•10 views

CVE-2021-34428

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being...

3.6CVSS6.7AI score0.00963EPSS
SaveExploits1References19Affected Software1
OSV
OSV
•added 2021/06/22 3:15 p.m.•14 views

UBUNTU-CVE-2021-34428

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being...

3.5CVSS6.7AI score0.00963EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2021/06/22 2:45 p.m.•49 views

CVE-2021-34428

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being...

3.6CVSS5.7AI score0.00963EPSS
SaveExploits1
CNVD
CNVD
•added 2021/06/22 12:00 a.m.•53 views

Nextcloud Android app information disclosure vulnerability (CNVD-2021-44760)

Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. The Nextcloud Android app suffers from an information disclosure vulnerability that can be exploited by an attacker to gain access to shared preference information in the Nextcloud...

4.3CVSS6.4AI score0.00881EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•10 views

Nvidia NVIDIA TLK 缓冲区错误漏洞

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation, USA, for use with Trusted Firmware-A TF-A. A security vulnerability exists in NVIDIA TLK, which stems from Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function, where a missing check allows exploitation of an integer...

7.9CVSS6.8AI score0.00253EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•11 views

NVIDIA TLK 输入验证错误漏洞

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...

5.5CVSS6.4AI score0.00187EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•13 views

Nvidia NVIDIA TLK 输入验证错误漏洞

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...

6.7CVSS7.3AI score0.00207EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•11 views

NVIDIA TLK 输入验证错误漏洞

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...

5.5CVSS6.4AI score0.00192EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/06/18 12:00 a.m.•18 views

Google Chrome post-release reuse vulnerability (CNVD-2021-45148)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Sharing in versions prior to Google Chrome 91.0.4472.114. No detailed vulnerability details are provided at this time...

8.8CVSS6.2AI score0.0135EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/17 9:15 p.m.•35 views

CVE-2021-32695

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had to initiate the sharing flow and choos...

4.3CVSS0.00881EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/06/17 9:15 p.m.•10 views

CVE-2021-32695

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had to initiate the sharing flow and choos...

4.3CVSS6.1AI score0.00881EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/06/17 8:50 p.m.•42 views

CVE-2021-32695 Malicious Android app could access Shared Preferences of the Nextcloud Android client

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had to initiate the sharing flow and choos...

3.9CVSS4.5AI score0.00881EPSS
SaveExploits1References3
Nextcloud
Nextcloud
•added 2021/06/17 10:32 a.m.•59 views

Malicious Android app could access Shared Preferences of the Nextcloud Android client

None...

4.3CVSS4.5AI score0.00881EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2021/06/17 12:00 a.m.•14 views

Nextcloud Android app 信息泄露漏洞

Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. The Nextcloud Android app suffers from an information disclosure vulnerability that can be exploited by an attacker to gain access to shared preference information in the Nextcloud...

4.3CVSS5.7AI score0.00881EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/17 12:00 a.m.•3 views

CVE-2021-32695: Exposure of Sensitive Information to an Unauthorized Actor

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.16.1, a malicious app on the same device could have gotten access to the shared preferences of the Nextcloud Android application. This required user-interaction as a victim had to initiate the sharing flow and choos...

4.3CVSS5.9AI score0.00881EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/06/17 12:00 a.m.•11 views

PT-2021-19862

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.16.1 Description The Nextcloud Android app is vulnerable to an issue where a malicious app on the same device could access the shared preferences of the Nextcloud Android application. This requires...

4.3CVSS6.1AI score0.00881EPSS
SaveExploits1References10
OpenVAS
OpenVAS
•added 2021/06/17 12:00 a.m.•54 views

Fedora: Security Advisory for glibc (FEDORA-2021-7ddb8b0537)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.7AI score0.02874EPSS
SaveExploits1References2
Rows per page
Query Builder