Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2021-36234

Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Unit4
Products
Mik.starlight
CVE-2021-36233

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Unit4
Products
Mik.starlight
CVE-2021-36232

Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Unit4
Products
Mik.starlight
CVE-2021-36231

Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.

CVSS 3.1 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Unit4
Products
Mik.starlight