Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2021-02756 CVE-2021-3825 · GHSA-5g5h-vp5m-chrx

Missing Authorization Checks in LiderAhenk

Priority MEDIUM 45

On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.01621 Published 2021-10-01 Fixed in 2.1.16 CWE-306
TI-2021-02737 CVE-2021-3806 · GHSA-83vh-mv8c-q8vm

Path Traversal in Pardus Software Center

Priority LOW 28

A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write files on the system.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00698 Published 2021-09-18 Fixed in 0.1.0~beta10 CWE-22