Lucene search
+L

137 matches found

CVE
CVE
added 2018/10/31 1:0 p.m.82 views

CVE-2016-2121

CVE-2016-2121 relates to a permissions flaw in Redis that sets weak permissions on certain files/directories, enabling a local, unprivileged user to potentially access sensitive information. The connected OSV/RHSA entries corroborate a Redis vulnerability requiring a security update; Red Hat’s RH...

5.5CVSS5.3AI score0.00374EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/10/31 1:0 p.m.20 views

CVE-2016-2121

A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive information. A local, unprivileged user could possibly use this flaw to access unauthorized system information...

4CVSS5.3AI score0.00374EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/05/22 12:0 a.m.5 views

mySCADA myPRO File Upload Vulnerability

mySCADA myPRO is an industrial visualization control system from mySCADA Technologies, Czech Republic. A security vulnerability exists in the file 'myscadagate.exe' in mySCADA myPRO version 7, which originates from the program's use of a hard-coded FTP account username: myscada, password: Vikuk63...

9.1CVSS9.2AI score0.1593EPSS
SaveExploits5References1
OSV
OSV
added 2018/05/20 10:29 p.m.5 views

CVE-2018-11311

A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials...

9.1CVSS5.9AI score0.1593EPSS
SaveExploits5References3
0day.today
0day.today
added 2018/05/20 12:0 a.m.89 views

mySCADA myPRO 7 - Hard-Coded Credentials Vulnerability

Exploit for multiple platform in category remote exploits Exploit Title: mySCADA myPRO 7 - Hardcoded FTP Username and Password Exploit Author: Emre ÖVÜNÇ Vendor Homepage: https://www.myscada.org/mypro/ Software Link: https://www.myscada.org/download/ Version: v7 Tested on: Linux, Windows I. Probl...

0.1593EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/05/20 12:0 a.m.57 views

mySCADA myPRO 7 - Hard-Coded Credentials

mySCADA myPRO 7 - Hard-Coded Credentials. CVE-2018-11311. Remote exploit for Multiple platform Exploit Title: mySCADA myPRO 7 - Hardcoded FTP Username and Password Date: 2018-05-19 Exploit Author: Emre ÖVÜNÇ Vendor Homepage: https://www.myscada.org/mypro/ Software Link:...

9.1CVSS9.5AI score0.1593EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.35 views

Oracle: Security Advisory (ELSA-2012-2021)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.4AI score0.00607EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.55 views

Oracle: Security Advisory (ELSA-2012-0743)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00713EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.45 views

Oracle: Security Advisory (ELSA-2012-2022)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.4AI score0.00775EPSS
SaveExploits5References2
NVD
NVD
added 2015/05/25 5:59 p.m.24 views

CVE-2015-2121

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...

7.8CVSS6.6AI score0.02899EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2015/05/25 5:59 p.m.4 views

CVE-2015-2121

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...

7.8CVSS5.8AI score0.02899EPSS
SaveExploits0References5
securityvulns
securityvulns
added 2015/05/11 12:0 a.m.54 views

[security bulletin] HPSBGN03328 rev.1 - Network Virtualization for HP LoadRunner and Performance Center, Remote Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04657310 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04657310 Version: 1 HPSBGN03328 rev....

7.8CVSS0.3AI score0.02899EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2014/12/22 12:0 a.m.44 views

Adobe Shockwave Player <= 11.5.9.620 (APSB11-17) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.9.620 or earlier. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption vulnerabilities affect the 'Dirapi.dll' component that can result in arbitrary code execution. CVE-2011-0317,...

9.3CVSS6.8AI score0.08464EPSS
SaveExploits0References44
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.23 views

Foreman (Red Hat OpenStack/Satellite) bookmarks/create Code Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit4...

7.1AI score
SaveExploits0
CVE
CVE
added 2014/03/19 1:0 a.m.55 views

CVE-2014-2121

Cisco Hosted Collaboration Solution (HCS) runs Java-based software that contains a vulnerability due to improper packet processing in the Java code, allowing remote, unauthenticated attackers to cause a denial of service by closing TCP ports. The issue affects HCS deployments using the affected J...

5CVSS6.9AI score0.02963EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2014/03/04 12:0 a.m.35 views

Ubuntu Update for gnutls26 USN-2121-1

Check for the Version of gnutls26 OpenVAS Vulnerability Test $Id: gbubuntuUSN21211.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for gnutls26 USN-2121-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

5.8CVSS5.8AI score0.03416EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2014/02/26 12:0 a.m.28 views

Ubuntu 12.04 LTS / 12.10 / 13.10 : gnutls26 vulnerability (USN-2121-1)

Suman Jana discovered that GnuTLS incorrectly handled version 1 intermediate certificates. This resulted in them being considered to be a valid CA certificate by default, which was contrary to documented behaviour. Note that Tenable Network Security has extracted the preceding description block...

5.8CVSS5.3AI score0.03416EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2013/12/04 12:0 a.m.54 views

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2037-1)

A flaw was discovered in the Linux kernel's KVM kernel virtual machine. An administrative user in the guest OS could leverage this flaw to cause a denial of service in the host OS. CVE-2012-2121 Multiple integer overflow flaws where discovered in the Alchemy LCD frame- buffer drivers in the Linux...

6.9CVSS8AI score0.00596EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2013/12/04 12:0 a.m.33 views

Ubuntu 10.04 LTS : linux vulnerabilities (USN-2036-1)

A flaw was discovered in the Linux kernel's KVM kernel virtual machine. An administrative user in the guest OS could leverage this flaw to cause a denial of service in the host OS. CVE-2012-2121 Multiple integer overflow flaws where discovered in the Alchemy LCD frame- buffer drivers in the Linux...

6.9CVSS8AI score0.00596EPSS
SaveExploits1References3
NVD
NVD
added 2013/07/31 1:20 p.m.37 views

CVE-2013-2121

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute...

6CVSS7.3AI score0.24782EPSS
SaveExploits5References5
Rows per page
Query Builder