CVE-2021-38477

Mô tả

Tham khảo

• us-cert.cisa.gov/ics/advisories/icsa-21-292-01 · Patch

Lỗ hổng khác của versiondog

• CVE-2021-38481NGHIÊM TRỌNG 9.8The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID …
• CVE-2021-38479CAO 7.5Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker c…
• CVE-2021-38475CAO 8.8The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissi…
• CVE-2021-38473CAO 8.8The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow.
• CVE-2021-38471NGHIÊM TRỌNG 9.1There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create n…