Lucene search
K

14 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/05 6:24 p.m.2 views

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.3AI score0.00005EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/05 6:24 p.m.3 views

CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce.

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.3AI score0.00005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:44 p.m.8 views

CVE-2022-36972

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can...

9.8CVSS7.4AI score0.30906EPSS
Exploits0
NVD
NVD
added 2023/03/29 7:15 p.m.10 views

CVE-2022-36972

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can...

9.8CVSS9.6AI score0.30906EPSS
Exploits0References2
OSV
OSV
added 2023/03/29 7:15 p.m.0 views

CVE-2022-36972

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can...

9.8CVSS6AI score
Exploits0References2
Prion
Prion
added 2023/03/29 7:15 p.m.9 views

Authentication flaw

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can...

7.5CVSS9.6AI score0.30906EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/03/29 12:0 a.m.45 views

CVE-2022-36972

CVE-2022-36972 concerns Ivanti Avalanche 6.3.2.3490. The vulnerability is a SQL injection in the ProfileDaoImpl class that allows a crafted request to assemble and execute SQL from user-supplied input, enabling an authentication bypass over the network. Related disclosures (ZDI-22-777) and vendor...

9.8CVSS9.6AI score0.30906EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/09/29 7:44 a.m.1 views

CVE-2020-15328

creationtimestamp| type| source ---|---|--- 2022-09-29 07:44:55+00:00| seen| https://t.me/cibsecurity/50674...

5.3CVSS5.5AI score0.00159EPSS
Exploits1References1
NVD
NVD
added 2022/09/29 3:15 a.m.14 views

CVE-2020-15328

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions...

5.3CVSS0.00159EPSS
Exploits1References2
CVE
CVE
added 2020/06/26 2:46 p.m.36 views

CVE-2020-15328

Zyxel CloudCNM SecuManager (versions 3.1.0–3.1.1) is affected by a permissions weakness in the directory /opt/axess/var/blobstorage/. The issue stems from weak permissions on that path, which could allow unauthorized access to stored data. The available connected sources corroborate the affected ...

5.3CVSS5.3AI score0.00159EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2019/08/22 8:15 p.m.9 views

CVE-2019-15328

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

6.1CVSS6.4AI score0.0019EPSS
Exploits0References2
CVE
CVE
added 2019/08/22 7:9 p.m.51 views

CVE-2019-15328

The CVE-2019-15328 entry concerns the WordPress plugin import-users-from-csv-with-meta, vulnerable prior to version 1.14.0.3. The issue is a cross-site scripting (XSS) flaw in the plugin, allowing an attacker to execute client-side code. Documented impact indicates the vulnerability affects the p...

6.1CVSS6.9AI score0.0019EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/12/12 2:0 p.m.52 views

CVE-2018-15328

CVE-2018-15328 affects BIG-IP family, BIG-IQ, iWorkflow, and Enterprise Manager where SNMPv3 passphrases and trap destinations are not encrypted by the Secure Vault and are written in clear text to configuration files. Affected: BIG-IP components across 14.x (fix: 14.1.0), 13.x (13.0.0–13.1.1; “w...

7.5CVSS7.6AI score0.02179EPSS
Exploits0References2Affected Software13
OpenVAS
OpenVAS
added 2011/11/18 12:0 a.m.10 views

Fedora Update for wireshark FEDORA-2011-15328

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2011-15328 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Exploits0References2
Rows per page
Query Builder