Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2021-10-22 CVE-2021-38485 Unspecified vulnerability in Emerson products
The affected product is vulnerable to improper input validation in the restore file.
network
low complexity
emerson
8.8
2021-10-22 CVE-2021-42538 Command Injection vulnerability in Emerson products
The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.
network
low complexity
emerson CWE-77
8.8
2021-10-22 CVE-2021-42539 Unspecified vulnerability in Emerson products
The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.
network
low complexity
emerson
8.8
2021-10-22 CVE-2021-42540 Unspecified vulnerability in Emerson products
The affected product is vulnerable to a unsanitized extract folder for system configuration.
network
low complexity
emerson
8.8
2021-10-22 CVE-2021-42542 Unspecified vulnerability in Emerson products
The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.
network
low complexity
emerson
8.8
2021-10-22 CVE-2021-38461 Use of Hard-coded Credentials vulnerability in Auvesy Versiondog
The affected product uses a hard-coded blowfish key for encryption/decryption processes.
network
low complexity
auvesy CWE-798
8.2
2021-10-22 CVE-2021-38463 Allocation of Resources Without Limits or Throttling vulnerability in Auvesy Versiondog
The affected product does not properly control the allocation of resources.
network
low complexity
auvesy CWE-770
8.1
2021-10-22 CVE-2021-38467 Unspecified vulnerability in Auvesy Versiondog
A specific function code receives a raw pointer supplied by the user and deallocates this pointer.
network
low complexity
auvesy
8.1
2021-10-22 CVE-2021-38469 Unspecified vulnerability in Auvesy Versiondog
Many of the services used by the affected product do not specify full paths for the DLLs they are loading.
local
low complexity
auvesy
7.1
2021-10-22 CVE-2021-38473 Out-of-bounds Write vulnerability in Auvesy Versiondog
The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow.
network
low complexity
auvesy CWE-787
8.8