Approved changes feed: RSS · Atom

cpe:2.3:a:unit4:mik.starlight:7.9.5.24363:*:*:*:*:*:*:*

part: a version: 7.9.5.24363 update: *

VendorUnit4 (ccae4e01-9923-5c98-a3ff-ed1d8bad518b)
ProductMik.Starlight (bebc447f-17c7-5e93-b6fb-ecd71e77953d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36234 vulnerable 2026-06-08 05:32:50.132619 Details available
Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.
Published: 2021-08-31T17:45:38.000Z
Updated: 2024-08-04T00:54:51.197Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36233 vulnerable 2026-06-08 05:32:50.132200 Details available
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.
Published: 2021-08-31T17:50:00.000Z
Updated: 2024-08-04T00:54:50.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36232 vulnerable 2026-06-08 05:32:50.131895 Details available
Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.
Published: 2021-08-31T17:37:53.000Z
Updated: 2024-08-04T00:54:51.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36231 vulnerable 2026-06-08 05:32:50.131515 Details available
Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.
Published: 2021-08-31T17:41:20.000Z
Updated: 2024-08-04T00:54:51.226Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.