Filtered by vendor Unit4 Subscriptions
Filtered by product Mik.starlight Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-36231 1 Unit4 1 Mik.starlight 2024-08-04 8.8 High
Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.
CVE-2021-36234 1 Unit4 1 Mik.starlight 2024-08-04 5.5 Medium
Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.
CVE-2021-36232 1 Unit4 1 Mik.starlight 2024-08-04 8.8 High
Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.
CVE-2021-36233 1 Unit4 1 Mik.starlight 2024-08-04 6.5 Medium
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.