Lucene search
K

15 matches found

Circl
Circl
added 2025/09/14 9:6 p.m.2 views

CVE-2025-10405

creationtimestamp| type| source ---|---|--- 2025-09-14 21:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyt744hogs2c 2025-09-15 06:21:17+00:00| seen| https://gist.github.com/Darkcrai86/dec8cedc30dce480a710e590c8ac06cc...

9.8CVSS7.3AI score0.0006EPSS
Exploits1References2
NVD
NVD
added 2025/02/15 12:15 a.m.7 views

CVE-2024-10405

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...

6.9CVSS0.00111EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/14 11:23 p.m.5 views

CVE-2024-10405 Weak TLS Ciphers on Brocade SANnav port 443 & 18082

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...

6.9CVSS0.00111EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/14 11:23 p.m.5 views

CVE-2024-10405 Weak TLS Ciphers on Brocade SANnav port 443 & 18082

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...

6.9CVSS7.1AI score0.00111EPSS
Exploits0References1
CVE
CVE
added 2025/02/14 11:23 p.m.39 views

CVE-2024-10405

CVE-2024-10405 affects Brocade SANnav prior to 2.3.1b. The issue enables weak TLS ciphers on ports 443 and 18082, allowing a networked attacker to read the SANnav data stream containing monitored Fabric OS switches performance data, port status, zoning information, WWNs, and IP addresses. The des...

6.9CVSS6.9AI score0.00111EPSS
Exploits0References1Affected Software1
Broadcom
Broadcom
added 2025/02/13 12:0 a.m.6 views

Weak TLS Ciphers on Brocade SANnav port 443 & 18082. (CVE-2024-10405)

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoninginformation, WWNs, IP Addresses, but no...

6.9CVSS6.8AI score0.00111EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/05/24 10:0 p.m.0 views

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1574 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.17)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2019-10405 Source advisory: OSV:GHSA-47WC-P5CP-W7PW...

5.4CVSS6AI score0.79832EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2019/10/22 9:51 p.m.31 views

CVE-2019-10405

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly...

5.4CVSS2.5AI score0.79832EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2019/10/21 12:0 a.m.42 views

Jenkins < 2.176.4 LTS / 2.197 Multiple Vulnerabilities

The version of Jenkins running on the remote web server is prior to 2.197 or is a version of Jenkins LTS prior to 2.176.4. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists in the /whoAmI/ URL due to the exposed 'Cookie' HTTP Header. An...

5.4CVSS5.8AI score0.79832EPSS
Exploits0References7
CVE
CVE
added 2019/09/25 3:5 p.m.154 views

CVE-2019-10405

CVE-2019-10405 affects Jenkins 2.196 and earlier, and LTS 2.176.3 and earlier. The vulnerability causes the server to print the value of the cookie in the /whoAmI/ URL, despite the cookie being marked HttpOnly. This enables an attacker who can exploit another XSS vulnerability to obtain the HTTP ...

5.4CVSS5AI score0.79832EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/06/13 10:29 p.m.11 views

CVE-2018-10405

An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but...

7.8CVSS7.6AI score0.00078EPSS
Exploits1References1
CVE
CVE
added 2018/06/13 10:0 p.m.50 views

CVE-2018-10405

CVE-2018-10405 concerns Google Santa and molcodesignchecker, where a maliciously crafted Universal/Fat binary can bypass third‑party code signing checks. The vulnerability arises from incomplete inspection of Fat binaries, allowing an unsigned malicious payload to be executed while a legitimate A...

7.8CVSS7.5AI score0.00078EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/10/19 5:29 p.m.0 views

CVE-2017-10405

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: Report. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

10CVSS7.3AI score0.01739EPSS
Exploits0References2
CVE
CVE
added 2017/10/19 5:0 p.m.50 views

CVE-2017-10405

CVE-2017-10405 affects Oracle Hospitality Reporting and Analytics (subcomponent: Report) in Oracle Hospitality Applications. Affected versions: 8.5.1 and 9.0.0. An unauthenticated attacker with network access via HTTP can compromise the component, potentially gaining unauthorized access to data a...

10CVSS8.8AI score0.01739EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/09/07 1:0 p.m.41 views

CVE-2016-10405

The provided connected documents confirm a session fixation vulnerability in D-Link DIR-600L routers (rev. Ax) prior to firmware FW1.17.B01, allowing remote attackers to hijack web sessions via unspecified vectors. Affected devices include DIR-600L; remediation is to upgrade to FW1.17.B01 or late...

9.8CVSS9.1AI score0.00565EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder