VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403.732 vulnerabilities · 1767 actively exploited (CISA KEV)

insync client ✕Clear filters

6 results

ID	Severity	Summary	Published
CVE-2021-36668	ALTO7.8	URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron App.	12/07/2022
CVE-2021-36667	ALTO7.8	Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the local HTTP server due to un-sanitized call to the python os.system library.	12/07/2022
CVE-2021-36666	ALTO7.8	An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.	12/07/2022
CVE-2021-36665	ALTO7.8