CVE Vulnerability

Home » CVE’s

CVE’s

CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
CVE-2021-3662
2021-11-04
N/A
5.4 MEDIUM
Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
CVE-2021-36614
Mikrotik, Routeros
Routeros, Ccr1009-7g-1c-1s+, Ccr1009-7g-1c-1s+pc, Ccr1009-7g-1c-pc, Ccr1016-12g, Ccr1016-12s-1s+, Ccr1036-12g-4s, Ccr1036-12g-4s-em, Ccr1036-8g-2s+, Ccr1036-8g-2s+em
2022-10-18
N/A
6.5 MEDIUM
Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
CVE-2021-36613
Mikrotik, Routeros
Routeros, Ccr1009-7g-1c-1s+, Ccr1009-7g-1c-1s+pc, Ccr1009-7g-1c-pc, Ccr1016-12g, Ccr1016-12s-1s+, Ccr1036-12g-4s, Ccr1036-12g-4s-em, Ccr1036-8g-2s+, Ccr1036-8g-2s+em
2022-10-18
N/A
6.5 MEDIUM
Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
CVE-2021-3661
Hp, Z240 Tower Firmware
0150a129, 0150a12a, 0150a12b, 0150a12c, 0231a0av, 0231a0kl, 0231a65t, 0231a761, 0231a791, 0231a832
2022-12-19
N/A
8.4 HIGH
A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.
CVE-2021-36609
2022-06-27
N/A
5.4 MEDIUM
Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php.
CVE-2021-36608
2022-06-27
N/A
5.4 MEDIUM
Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php.
CVE-2021-36605
2021-08-02
N/A
5.4 MEDIUM
engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user list page. When viewing this page, the JavaScript code will be executed in the user's browser.
CVE-2021-36603
2023-01-13
N/A
6.1 MEDIUM
Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".
CVE-2021-36601
2021-08-19
N/A
6.1 MEDIUM
GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter.
CVE-2021-3660
2023-02-12
N/A
4.3 MEDIUM
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an