Skip to content
OpenAdvisories

Archive

22 July 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-7388 Public exploit EPSS 69%

    Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing

    Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the installation path, …

  • Medium 5.3
    CVE-2020-7387 Public exploit EPSS 34%

    Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor

    Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulnerability can be combined with CVE-2020-7388 to achieve full R…

  • Unscored —
    CVE-2015-2098 Public exploit EPSS 14%

    Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unsp…

  • Unscored —
    CVE-2015-2099 Public exploit EPSS 14%

    Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified ve…

  • Critical 9.8
    CVE-2021-35464 Exploited · Ransomware Public exploit EPSS 100%

    ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple p…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-36934 Exploited Public exploit EPSS 67%

    Windows Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…

    KEV Feb 10, 2022