Security Vulnerabilities - CVEs Published In 2021
Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.
CVSS Score
9.8
EPSS Score
0.018
Published
2021-08-03
CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while updating the theme.
CVSS Score
5.4
EPSS Score
0.019
Published
2021-08-03
An issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to arbitrary file reading due to an improper limitation of file loading on the server filesystem, aka directory traversal.
CVSS Score
8.5
EPSS Score
0.012
Published
2021-08-03
A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-08-03
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-08-03
A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-08-03
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause the underlying trust of the application trustlist mechanism is missing..
CVSS Score
7.8
EPSS Score
0.002
Published
2021-08-03
A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to cause further Elevation of Privileges.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-08-03
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-08-03
A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-08-03