28619 matches found
cn.net.vidyo:dylink-vidyo-ws-sdk (>=2.1.0.16.release, <=3.0.0.3.release), com.aftia.plugin:aem-build-maven-plugin.core (>=1.2.1, <=1.2.2) +290 more potentially affected by CVE-2012-5784 via org.apache.axis:axis (1.4)
org.apache.axis:axis MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.axis:axis and may be impacted: - cn.net.vidyo:dylink-vidyo-ws-sdk =2.1.0.16.release, =1.2.1, =1.0.0, =1.4-build003, =0.9.1, =0.0.3.m1, =0.0.3.m1, =0.0.3.m...
cn.net.vidyo:dylink-vidyo-ws-sdk (>=2.1.0.16.release, <=3.0.0.3.release), com.aftia.plugin:aem-build-maven-plugin.core (>=1.2.1, <=1.2.2) +290 more potentially affected by CVE-2012-5784 via org.apache.axis:axis (1.4)
org.apache.axis:axis MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.axis:axis and may be impacted: - cn.net.vidyo:dylink-vidyo-ws-sdk =2.1.0.16.release, =1.2.1, =1.0.0, =1.4-build003, =0.9.1, =0.0.3.m1, =0.0.3.m1, =0.0.3.m...
activemq:activemq (1.1), activemq:activemq-optional (3.2) +325 more potentially affected by CVE-2012-5784 via axis:axis (>=1.2-beta-2, <=1.4)
axis:axis MAVEN version =1.2-beta-2, =1.2.5, =1.1.0, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.6.4 and more Source cves: CVE-2012-5784 Source advisory: OSV:GHSA-55W9-C3G2-4RRH...
CVE-2020-26150
CVE-2020-26150 affects Logaritmo Aware CallManager 2012. The issue originates in info.php, where a direct request invoking phpinfo discloses sensitive information to remote attackers. The vulnerability is an information-disclosure flaw; exploitation details and concrete fixes are not provided in ...
CVE-2020-26150
info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function...
PT-2020-16312
Name of the Vulnerable Software and Affected Versions Logaritmo Aware CallManager 2012 Description The issue allows remote attackers to obtain sensitive information via a direct request to 'info.php', which calls the phpinfo function. Recommendations For Logaritmo Aware CallManager 2012, consider...
EulerOS 2.0 SP3 : xerces-j2 (EulerOS-SA-2020-2068)
According to the version of the xerces-j2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML...
MaraCMS 7.5 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MaraCMS Arbitrary PHP File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability in MaraCMS 7.5 and prior in...
FlexDotnetCMS Arbitrary ASP File Upload
This module exploits an arbitrary file upload vulnerability in FlexDotnetCMS v1.5.8 and prior in order to execute arbitrary commands with elevated privileges. The module first tries to authenticate to FlexDotnetCMS via an HTTP POST request to /login. It then attempts to upload a random TXT file a...
3S CoDeSys (Update A)
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: 3S-Smart Software Solutions Equipment: CoDeSys Vulnerabilities: Improper Access Control, Relative Path Traversal 2. UPDATE INFORMATION This updated advisory is a...
Microsoft SQL Server Reporting Services 2016 - Remote Code Execution
Exploit Title: Microsoft SQL Server Reporting Services 2016 - Remote Code Execution Google Dork: inurl:ReportViewer.aspx Date: 2020-09-17 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft SQL Server 2016 32-bit/x64 SP2 CU/GDR, Microsoft SQL Server 2014...
Input Director 1.4.3 Unquoted Service Path Vulnerability
Exploit Title: Input Director 1.4.3 - 'Input Director' Unquoted Service Path Discovery Date: 2020-09-08 Response from Input Director Support: 09/09/2020 Exploit Author: TOUHAMI Kasbaoui Vendor Homepage: https://www.inputdirector.com/ Version: 1.4.3 Tested on: Windows Server 2012, Windows 10 Find...
NewStart CGSL CORE 5.04 / MAIN 5.04 : rpm Multiple Vulnerabilities (NS-SA-2020-0039)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has rpm packages installed that are affected by multiple vulnerabilities: - RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary...
KB4577048: Windows Server 2012 September 2020 Security Update
The remote Windows host is missing security update 4577048 or cumulative update 4577038. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
KB4577071: Windows 8.1 and Windows Server 2012 R2 September 2020 Security Update
The remote Windows host is missing security update 4577071 or cumulative update 4577066. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB4576630)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB4576630 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4576629)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4576629 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
Security Only Update for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB4576489)
Security Only Update for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 KB4576489 Applies to: Microsoft .NET Framework 4.8 Summary ClickOnce will no longer download applications from untrusted servers which use NTLM authentication, but, instead, will fail with “Authentication...
Security Only Update for .NET Framework 4.8 for Windows Server 2012 (KB4576488)
Security Only Update for .NET Framework 4.8 for Windows Server 2012 KB4576488 Applies to: Microsoft .NET Framework 4.8 Summary ClickOnce will no longer download applications from untrusted servers which use NTLM authentication, but, instead, will fail with “Authentication failed”. Sites in the...
