Vulnerabilities > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-09-07 | CVE-2020-19750 | Out-of-bounds Read vulnerability in Gpac 0.8.0 An issue was discovered in gpac 0.8.0. | 7.5 |
2021-09-07 | CVE-2020-19752 | NULL Pointer Dereference vulnerability in multiple products The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference. | 7.5 |
2021-09-07 | CVE-2021-38705 | Cross-Site Request Forgery (CSRF) vulnerability in Cliniccases 7.3.3 ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). | 8.8 |
2021-09-07 | CVE-2021-38706 | SQL Injection vulnerability in Cliniccases 7.3.3 messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter. | 8.8 |
2021-09-07 | CVE-2021-39503 | Code Injection vulnerability in PHPmywind 5.6 PHPMyWind 5.6 is vulnerable to Remote Code Execution. | 7.2 |
2021-09-07 | CVE-2021-40143 | Injection vulnerability in Sonatype Nexus Repository Manager 3 Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. | 8.2 |
2021-09-07 | CVE-2021-38142 | Cleartext Transmission of Sensitive Information vulnerability in Barco Mirrorop Windows Sender Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. | 8.8 |
2021-09-07 | CVE-2021-39197 | Unspecified vulnerability in Better Errors Project Better Errors better_errors is an open source replacement for the standard Rails error page with more information rich error pages. | 8.8 |
2021-09-07 | CVE-2020-19131 | Out-of-bounds Write vulnerability in multiple products Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop". | 7.5 |
2021-09-07 | CVE-2020-7819 | SQL Injection vulnerability in Ntracker USB Enterprise A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. | 7.5 |