Known Vulnerabilities for Insync by Druva
Listed below are 3 of the newest known vulnerabilities associated with "Insync" by "Druva".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-36668 json | URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter t... | Not Provided | 2022-07-12 | 2026-07-09 |
| CVE-2021-36667 json | Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted p... | Not Provided | 2022-07-12 | 2026-07-09 |
| CVE-2020-5798 json | inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a ... | 7.8 - HIGH | 2020-12-07 | 2023-11-07 |
| CVE-2019-4001 json | Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS cod... | 7.8 - HIGH | 2020-03-24 | 2021-07-21 |
| CVE-2019-4000 json | Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authe... | 7.8 - HIGH | 2020-02-25 | 2021-09-08 |