Lucene search
+L

20 matches found

Circl
Circl
added 2026/07/30 2:13 p.m.11 views

CVE-2026-16971

creationtimestamp| type| source ---|---|--- 2026-07-30 14:13:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/f23y4hauoujpy...

5.9CVSS5.8AI score0.00318EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/30 9:43 a.m.8 views

CVE-2026-16971

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...

5.9CVSS5.9AI score0.00318EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/30 9:43 a.m.27 views

CVE-2026-16971

The CVE-2026-16971 entry concerns the IRIS web application (noted around version 2.4.26) where MFA validation is not protected against brute-force attempts. The connected CVE records consistently describe insufficient brute-force protection for OTP validation, indicating that an attacker could re...

5.9CVSS5.9AI score0.00318EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/22 4:42 p.m.6 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-1272, CVE-2020-16971, CVE-2026-1274)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-1272 DESCRIPTION: IBM Guardium Data Protection is vulnerable to Security Misconfiguration vulnerability in the user access control panel. CWE:CWE-613: Insufficient Session...

9.1CVSS7.1AI score0.0359EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/09 4:36 p.m.11 views

Security Bulletin: IBM Operations Analytics – Log Analysis is affected by a security feature bypass due to Azure SDK for Java

Summary Azure SDK for Java is used by IBM Operations Analytics – Log Analysis as part of secure, asynchronous messaging and event streaming over AMQP Advanced Message Queuing Protocol. CVE‑2020‑16971. Vulnerability Details CVEID:CVE-2020-16971 DESCRIPTION: Azure SDK for Java Security Feature Bypa...

9.1CVSS7.1AI score0.0359EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/07 9:29 a.m.12 views

CVE-2019-16971

In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...

6.1CVSS6.8AI score0.00803EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/12 5:3 p.m.10 views

Security Bulletin: IBM QRadar SIEM protocol is affected by an Elevation of Privilege in the Azure SDK for Java.

Summary Azure SDK for Java may allow privilege escalation under certain conditions; IBM QRadar SIEM has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2020-16971 DESCRIPTION: Azure SDK for Java Security Feature Bypass Vulnerability CVSS Source: NVD CVSS Base score: 9.1 CVSS...

9.1CVSS7.7AI score0.0359EPSS
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/24 5:35 p.m.9 views

ai.tripl:arc-jupyter_2.11 (>=0.0.13 <=0.0.14), ai.tripl:arc_2.11 (>=1.13.3 <=1.15.0) +37 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (>=0.7.1 <=3.2.0)

com.microsoft.azure:azure-eventhubs MAVEN version =0.7.1, =0.0.13, =1.13.3, =1.31.1, =1.20.0, =1.31.1, =1.4.0, =0.1.0, =0.6.0, =0.7.2, =3.0.0, =2.2.0, =2.3.15, =2.3.17 - com.microsoft.azure:spark-streaming-eventhubs2.11 =2.0.3 and more Source cves: CVE-2020-16971 Source advisory:...

9.1CVSS7.2AI score0.0359EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2022/05/24 5:35 p.m.7 views

com.azure:azure-messaging-eventhubs (>=5.0.0-beta.6 <=5.3.0-beta.1), com.azure:azure-messaging-eventhubs-checkpointstore-blob (>=1.0.0-beta.4 <=1.3.0-beta.1) +13 more potentially affected by CVE-2020-16971 via com.azure:azure-core-amqp (>=1.0.0-beta.8 <=1.6.0-beta.1)

com.azure:azure-core-amqp MAVEN version =1.0.0-beta.8, =5.0.0-beta.6, =1.0.0-beta.4, =7.0.0-beta.1, =1.1.3, =1.1.3, =1.1.3, =1.5.4-bkbase.1, =1.20.0, =1.3.0.Alpha1, =0.5.0, =3.5.0, =3.5.0, =1.1.21, =1.2.01 Source cves: CVE-2020-16971https://vul...

9.1CVSS7.1AI score0.0359EPSS
SaveExploits0
Circl
Circl
added 2020/12/10 2:39 a.m.11 views

CVE-2020-16971

creationtimestamp| type| source ---|---|--- 2020-12-10 02:39:09+00:00| seen| https://t.me/cibsecurity/18441 2020-12-10 03:25:29+00:00| seen| https://t.me/cibsecurity/18461 2020-12-10 04:25:29+00:00| seen| https://t.me/cibsecurity/18481 2020-12-10 05:25:26+00:00| seen| https://t.me/cibsecurity/185...

9.1CVSS7.3AI score0.0359EPSS
SaveExploits0References14
OSV
OSV
added 2020/12/10 12:15 a.m.2 views

CVE-2020-16971

Azure SDK for Java Security Feature Bypass Vulnerability...

7.4CVSS7.1AI score0.0359EPSS
SaveExploits0References2
Chainguard
Chainguard
added 2020/12/10 12:15 a.m.20 views

CVE-2020-16971 vulnerabilities

Vulnerabilities for packages: logstash...

9.1CVSS7.1AI score0.0359EPSS
SaveExploits0
Wolfi
Wolfi
added 2020/12/10 12:15 a.m.22 views

CVE-2020-16971 vulnerabilities

Vulnerabilities for packages: logstash...

9.1CVSS7.2AI score0.0359EPSS
SaveExploits0
CVE
CVE
added 2020/12/09 11:36 p.m.340 views

CVE-2020-16971

CVE-2020-16971 affects the Azure SDK for Java and is described as a Security Feature Bypass vulnerability. IBM QRadar SIEM bulletin confirms exploitation could enable privilege escalation under certain conditions and lists affected QRadar versions (7.5–7.5.0 UP14) with remediation to upgrade to Q...

9.1CVSS7.3AI score0.0359EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/12/09 11:36 p.m.50 views

CVE-2020-16971 Azure SDK for Java Security Feature Bypass Vulnerability

...

7.4CVSS7.5AI score0.0359EPSS
SaveExploits0References1
CVE
CVE
added 2019/10/30 3:36 p.m.28 views

CVE-2017-16971

CVE-2017-16971 is rejected/not used per the Initial Description.

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2019/10/30 3:36 p.m.12 views

CVE-2017-16971

...

SaveExploits0
OSV
OSV
added 2019/10/22 10:15 p.m.9 views

CVE-2019-16971

In FusionPBX up to 4.5.7, the file app\messages\messagesthread.php uses an unsanitized "contactuuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...

6.1CVSS6.8AI score
SaveExploits0References2
CVE
CVE
added 2019/10/22 9:16 p.m.109 views

CVE-2019-16971

FusionPBX: CVE-2019-16971 affects versions up to 4.5.7. The vulnerability is a cross-site scripting (XSS) issue in file app\messages\messages_thread.php where an unsanitized contact_uuid from the URL is reflected in HTML on three occasions. Impact (per sources) is client-side code execution via c...

6.1CVSS6.2AI score0.00803EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2018/09/13 12:0 a.m.60 views

Wisetail Learning Ecosystem 4.11.6 Insecure Direct Object Reference

Title: MULTIPLE IDOR VUNLERABILITies ON WISETAIL LEARNING ECOSYSTEM LE UPTO V4.11.6 Date: 12/09/2019 Author: S. M. Zia Ur Rashid Vendor Homepage: wisetail.com Author Contact: https://www.linkedin.com/in/ziaurrashid/ Affected Version: = 4.11.6 Assaigned CVE: CVE-2018-16970, CVE-2018-16971...

4.7AI score0.00733EPSS
SaveExploits3
Rows per page
Query Builder