Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Medium CVE-2021-29095: ESRI Arcgis


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: cxsecurity.com

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Esri ArcReader/ArcGIS Desktop/ArcGIS Engine/ArcGIS Pro use after free


📈 79.98 Punkte
🕵️ Sicherheitslücken

🕵️ Esri ArcReader/ArcGIS Desktop/ArcGIS Engine/ArcGIS Pro File uninitialized pointer


📈 79.98 Punkte
🕵️ Sicherheitslücken

🕵️ Esri ArcReader/ArcGIS Desktop/ArcGIS Engine/ArcGIS Pro File Parser stack-based overflow


📈 79.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25690 | Esri ArcGIS Enterprise Web App Builder up to 11.1 on ArcGIS Link cross site scripting


📈 61.06 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-38039 | Esri Portal for ArcGIS up to 10.9.1/11.1 on ArcGIS Link cross site scripting


📈 61.06 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-37694 | ArcGIS Enterprise Server 10.8.0 /arcgis/rest/services information disclosure


📈 41.19 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38186 | ESRI Portal for ArcGIS up to 10.8.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38191 | ESRI Portal for ArcGIS up to 10.9.0 injection


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38193 | ESRI Portal for ArcGIS up to 10.8.1 neutralization of directives


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38194 | ESRI Portal for ArcGIS 10.8.1 System Property missing encryption


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38192 | ESRI Portal for ArcGIS cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-38196 | Esri ArcGIS Server up to 10.9.1 path traversal


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25700 | Esri ArcGIS Enterprise up to 11.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25708 | Esri ArcGIS Enterprise Web App Builder 10.8.1/10.9.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25704 | Esri Portal for ArcGIS Enterprise Experience Builder up to 11.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2013-7232 | ESRI ArcGIS 10.1/10.2 sql injection


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2013-5222 | ESRI ArcGIS 10.1 cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2013-7231 | ESRI ArcGIS 10.1/10.2 cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2012-4949 | ESRI ArcGIS 10.1 where sql injection (XFDB-79977)


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2013-5221 | Esri ArcGIS 10.1/10.2 unknown vulnerability


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-1770 | ESRI ArcGIS 9.2 memory corruption (XFDB-33457 / BID-23175)


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-4278 | ESRI ArcGIS 9.2 sprintf memory corruption (XFDB-36042 / BID-25334)


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25699 | Esri Portal for ArcGIS up to 11.2 improper authentication


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25707 | Esri Portal for ArcGIS up to 10.8.1/10.9.1/11.1 String cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25691 | Esri Portal for ArcGIS up to 10.8.1/10.9.1/11.1/11.2 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-38036 | Esri Portal for ArcGIS Enterprise Experience Builder up to 10.8.1/10.9.1/11.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25701 | Esri Portal for ArcGIS Enterprise Experience Builder up to 10.8.1/10.9.1/11.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25702 | Esri ArcGIS Enterprise Web App Builder up to 10.8.1/10.9.1/11.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-38037 | Esri Portal for ArcGIS 10.9.1/11.1 redirect


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-38038 | Esri Portal for ArcGIS up to 10.8.1/10.9.1/11.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-25694 | Esri Portal for ArcGIS Enterprise up to 10.8.1/10.9.1/11.1 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-38040 | Esri Portal for ArcGIS up to 10.8.1/10.9.1/11.1/11.2 File file inclusion


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8149 | Esri Portal for ArcGIS up to 11.1/11.2 Link cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8148 | Esri Portal for ArcGIS up to 10.8.1/10.9.1/11.1/11.2 redirect


📈 41.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-25841 | Esri ArcGIS Server up to 11.0 on Windows/Linux Feature Service cross site scripting


📈 41.02 Punkte
🕵️ Sicherheitslücken

matomo
•