CVE-2021-42096
- EPSS 0.32%
- Veröffentlicht 21.10.2021 01:15:06
- Zuletzt bearbeitet 21.11.2024 06:27:15
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
CVE-2021-42097
- EPSS 0.61%
- Veröffentlicht 21.10.2021 01:15:06
- Zuletzt bearbeitet 21.11.2024 06:27:15
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack ...
CVE-2021-42771
- EPSS 0.17%
- Veröffentlicht 20.10.2021 21:15:07
- Zuletzt bearbeitet 21.11.2024 06:28:08
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
CVE-2021-42762
- EPSS 0.01%
- Veröffentlicht 20.10.2021 19:15:07
- Zuletzt bearbeitet 21.11.2024 06:28:07
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that ...
CVE-2021-35603
- EPSS 0.12%
- Veröffentlicht 20.10.2021 11:17:05
- Zuletzt bearbeitet 21.11.2024 06:12:37
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult ...
- EPSS 0.17%
- Veröffentlicht 20.10.2021 11:16:59
- Zuletzt bearbeitet 21.11.2024 06:12:35
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily ...
CVE-2021-35588
- EPSS 0.16%
- Veröffentlicht 20.10.2021 11:16:59
- Zuletzt bearbeitet 21.11.2024 06:12:35
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit...
- EPSS 0.14%
- Veröffentlicht 20.10.2021 11:16:55
- Zuletzt bearbeitet 21.11.2024 06:12:34
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitabl...
CVE-2021-35567
- EPSS 0.22%
- Veröffentlicht 20.10.2021 11:16:38
- Zuletzt bearbeitet 15.08.2025 20:23:58
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily explo...
- EPSS 0.11%
- Veröffentlicht 20.10.2021 11:16:37
- Zuletzt bearbeitet 21.11.2024 06:12:31
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily ...