Lucene search
+L

8739 matches found

Openbugbounty
Openbugbounty
added 2021/10/15 2:20 a.m.11 views

All Vulnerabilities for algerie360.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| algerie360.com ---|--- Open Bug Bounty...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/10/15 2:19 a.m.11 views

All Vulnerabilities for aktuelno.me Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| aktuelno.me ---|--- Open Bug Bounty...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/10/15 2:2 a.m.23 views

All Vulnerabilities for 10tv.in Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| 10tv.in ---|--- Open Bug Bounty Program...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/10/13 11:13 a.m.12 views

All Vulnerabilities for pbc.wa.edu.au Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pbc.wa.edu.au ---|--- Open Bug Bounty...

7.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/10/13 11:13 a.m.13 views

All Vulnerabilities for pakenhamsc.vic.edu.au Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pakenhamsc.vic.edu.au ---|--- Open Bug...

7.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/10/13 9:4 a.m.12 views

All Vulnerabilities for algerie360.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| algerie360.com ---|--- Open Bug Bounty...

7.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/10/13 8:51 a.m.10 views

All Vulnerabilities for aii.unimelb.edu.au Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| aii.unimelb.edu.au ---|--- Open Bug...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/12 3:15 p.m.6 views

CVE-2021-38179

Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials...

4.9CVSS5.8AI score0.00798EPSS
SaveExploits0References2
CVE
CVE
added 2021/10/12 2:3 p.m.64 views

CVE-2021-38179

CVE-2021-38179 affects SAP Business One Integration Admin UI, where a debugging function is enabled by default. This allows an Admin User to see captured packet contents, potentially including user credentials, constituting an information-disclosure risk. Multiple connected sources (NVD, CNVD/CNN...

4.9CVSS5AI score0.00798EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/10/12 2:3 p.m.33 views

CVE-2021-38179

Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials...

5.4AI score0.00798EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/06 8:15 p.m.10 views

CVE-2021-34711

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted input to a debug she...

5.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/06 7:46 p.m.64 views

CVE-2021-34711

CVE-2021-34711 affects Cisco IP Phone software. A vulnerability in the debug shell allows an authenticated, local attacker to read arbitrary files on the device filesystem due to insufficient input validation. The issue is triggered by crafted input to a debug shell command. The impact is read ac...

5.5CVSS5.2AI score0.00266EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/06 7:46 p.m.42 views

CVE-2021-34711 Cisco IP Phone Software Arbitrary File Read Vulnerability

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted input to a debug she...

5.5CVSS5.5AI score0.00266EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/10/06 4:0 p.m.70 views

Cisco IP Phone Software Arbitrary File Read Vulnerability

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted input to a debug she...

5.5CVSS5.2AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/06 12:0 a.m.9 views

Cisco IP Phone 路径遍历漏洞

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. A path traversal vulnerability exists in Cisco IP Phone that stems from insufficient input validation. An attacker can exploit this vulnerability by providing crafted input to...

5.5CVSS5.9AI score0.00266EPSS
SaveExploits0References6
OSV
OSV
added 2021/10/05 2:7 p.m.10 views

CLSA-2021-1633442827 Fix of CVE: CVE-2021-3487

CVE-2021-3487: excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c readsection...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2021/09/27 12:0 a.m.11 views

OSV-2021-1373 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39313 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug csidevattr doaction...

7.2AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/09/21 12:0 a.m.16 views

Apache Struts Debug Mode Enabled (HTTP) - Active Check

The remote host is running an Apache Struts application with enabled debug mode. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.99999EPSS
SaveExploits45References3
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/09/13 7:19 a.m.53 views

A3: Sensitive Data Exposure ❗️ — Top 10 OWASP 2017

A3: Sensitive Data Exposure ❗️ — Top 10 OWASP 2017 Introduction I feel like a lot of mystery surrounds this issue from the top 10 OWASP vulnerabilities. A lot of people seem to wonder which data is sensitive when exposed. Some people seem to think every single API key disclosed in a JS file is a...

5CVSS7.7AI score0.00862EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/09/11 12:0 a.m.16 views

PT-2021-5033 · Intel +5 · Intel Processors +5

Name of the Vulnerable Software and Affected Versions: IntelR processors affected versions not specified Description: The issue is related to the activation of test or debug logic at runtime for some IntelR processors, which may allow an unauthenticated user to potentially enable escalation of...

9.9CVSS6.1AI score0.06451EPSS
SaveExploits3References131
Rows per page
Query Builder