Lucene search
+L

83 matches found

Cvelist
Cvelist
added 2023/03/20 5:26 p.m.35 views

CVE-2023-0681 Rapid7 Nexpose Uncontrolled URL Redirect

Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in t...

4.3CVSS6.3AI score0.00329EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:54 a.m.7 views

SUSE CVE-2011-0681

The Cascading Style Sheets CSS Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL...

4.3CVSS6.8AI score0.02453EPSS
SaveExploits0References4
CVE
CVE
added 2022/03/21 6:55 p.m.98 views

CVE-2022-0681

Consolidated details for CVE-2022-0681: The WordPress plugin Simple Membership (pre-4.1.0) does not perform CSRF checks when deleting Transactions, allowing a logged-in admin to delete arbitrary transactions via CSRF. Impact is a CSRF vulnerability enabling unauthorized deletion of transactions b...

6.5CVSS6.4AI score0.00531EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2021/10/06 2:12 p.m.99 views

CVE-2021-0681

CVE-2021-0681 is a vulnerability in Android where a missing permission check in system properties could allow local information disclosure without extra execution privileges and without user interaction. Affected components include MediaTek system properties on Android devices. The issue is docum...

5.5CVSS5.1AI score0.00108EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.32 views

SUSE: Security Advisory (SUSE-SU-2021:0681-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.6AI score0.01738EPSS
SaveExploits0References11
OpenVAS
OpenVAS
added 2020/02/12 12:00 a.m.57 views

Microsoft Windows Multiple Vulnerabilities (KB4532693)

This host is missing a critical security update according to Microsoft KB4532693 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
SaveExploits30References3
OpenVAS
OpenVAS
added 2020/02/12 12:00 a.m.54 views

Microsoft Windows Multiple Vulnerabilities (KB4537789)

This host is missing a critical security update according to Microsoft KB4537789 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
SaveExploits30References3
OpenVAS
OpenVAS
added 2020/02/12 12:00 a.m.75 views

Microsoft Windows Multiple Vulnerabilities (KB4537764)

This host is missing a critical security update according to Microsoft KB4537764 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
SaveExploits30References3
NVD
NVD
added 2020/02/11 10:15 p.m.30 views

CVE-2020-0681

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734...

7.6CVSS8.3AI score0.10626EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/11 10:15 p.m.4 views

CVE-2020-0681

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734...

7.5CVSS7.9AI score0.10626EPSS
SaveExploits0References1
Prion
Prion
added 2020/02/11 10:15 p.m.29 views

Remote code execution

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681...

9.3CVSS8.3AI score0.16529EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2020/02/11 9:22 p.m.143 views

CVE-2020-0681

CVE-2020-0681 is a remote code execution vulnerability in the Windows Remote Desktop Client. The issue occurs when a user connects to a malicious Remote Desktop server, allowing an attacker to execute arbitrary code on the client machine. The vulnerability is associated with the Remote Desktop Cl...

7.6CVSS8.2AI score0.10626EPSS
SaveExploits0References1Affected Software8
The Hacker News
The Hacker News
added 2020/02/11 6:00 p.m.8 views

Update Microsoft Windows Systems to Patch 99 New Security Flaws

A few hours after Adobe today released security updates for five of its widely-distributed software, Microsoft also issued its February 2020 Patch Tuesday edition with patches for a total of 99 new vulnerabilities. According to the advisories, 12 of the total issues patched by the tech giant this...

9.3CVSS7.7AI score0.86863EPSS
SaveExploits17
Tenable Nessus
Tenable Nessus
added 2020/02/11 12:00 a.m.276 views

KB4532693: Windows 10 Version 1903 and Windows 10 Version 1909 February 2020 Security Update

The remote Windows host is missing security update 4532693. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

9.3CVSS8.2AI score0.86863EPSS
SaveExploits30References86
Tenable Nessus
Tenable Nessus
added 2020/02/11 12:00 a.m.283 views

KB4537789: Windows 10 Version 1709 February 2020 Security Update

The remote Windows host is missing security update 4537789. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

9.3CVSS8.1AI score0.86863EPSS
SaveExploits30References79
Cvelist
Cvelist
added 2020/01/24 9:14 p.m.10 views

CVE-2019-0681

...

SaveExploits0
CVE
CVE
added 2020/01/24 9:14 p.m.27 views

CVE-2019-0681

CVE-2019-0681 entry is rejected and not used; does not represent an active vulnerability.

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/03/29 12:00 a.m.47 views

Oracle Linux 7 : thunderbird (ELSA-2019-0681)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0681 advisory. 60.6.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 60.6.1-1 - Update to 60.6.1 60.6.0-1 - Update to...

9.8CVSS8.1AI score0.29514EPSS
SaveExploits26References11
Tenable Nessus
Tenable Nessus
added 2019/03/29 12:00 a.m.42 views

RHEL 7 : thunderbird (RHSA-2019:0681)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0681 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.6.1. Security Fixes: Mozilla:...

9.8CVSS8.2AI score0.29514EPSS
SaveExploits26References27
CVE
CVE
added 2018/11/15 3:00 p.m.60 views

CVE-2018-0681

Denbun by NEOJAPAN Inc. is affected (Denbun POP v3.3P R4.0 and earlier; Denbun IMAP v3.3I R4.0 and earlier). The issue is hard-coded credentials that may allow remote attackers to login to the Management page and modify configuration. This CVE is also listed with high/critical impact in sources t...

9.8CVSS9.3AI score0.01486EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder