Show filters
10,350 Total Results
Displaying 41-50 of 10,000
Refine your search criteria for more targeted results.
Sort by:
Attacker Value
Very High
CVE-2021-33045
Disclosure Date: September 15, 2021 (last updated February 23, 2025)
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
1
Attacker Value
Unknown
CVE-2021-33044
Disclosure Date: September 15, 2021 (last updated February 23, 2025)
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
1
Attacker Value
Unknown
CVE-2021-30761
Disclosure Date: September 08, 2021 (last updated February 23, 2025)
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
1
Attacker Value
High
CVE-2021-30762
Disclosure Date: September 08, 2021 (last updated February 23, 2025)
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
1
Attacker Value
High
CVE-2021-36976
Disclosure Date: July 20, 2021 (last updated February 23, 2025)
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
1
Attacker Value
Unknown
CVE-2021-1879
Disclosure Date: April 02, 2021 (last updated February 22, 2025)
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..
1
Attacker Value
Unknown
CVE-2021-3018
Disclosure Date: January 05, 2021 (last updated February 22, 2025)
ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.
1
Attacker Value
Unknown
CVE-2020-27950
Disclosure Date: December 08, 2020 (last updated February 22, 2025)
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.
1
Attacker Value
Unknown
CVE-2020-27932
Disclosure Date: December 08, 2020 (last updated February 22, 2025)
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.
1
Attacker Value
Very High
CVE-2020-9934 - macOS Transparency, Consent, and Control (TCC) Framework bypass
Disclosure Date: October 16, 2020 (last updated November 28, 2024)
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.
1
