Lucene search
+L

75 matches found

Cvelist
Cvelist
added 2022/07/19 5:46 p.m.47 views

CVE-2022-2394 Sensitive Parameter Exposure in Puppet Bolt prior to 3.24

Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet Enterprise...

4.1CVSS4.7AI score0.00511EPSS
SaveExploits0References1
CVE
CVE
added 2022/07/19 5:46 p.m.92 views

CVE-2022-2394

CVE-2022-2394 affects Puppet Bolt prior to 3.24.0. The vulnerability results from Bolt printing sensitive parameters during planning/runs, which may be logged when executed programmatically (e.g., via Puppet Enterprise). Affected versions include Bolt before 3.24.0; the issue is an information di...

4.1CVSS3.9AI score0.00511EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2021/08/02 4:19 a.m.454 views

Exploit for CVE-2021-2394

CVE-2021-2394 POC for CVE-2021-2394 - Disclaimer - This pr...

10CVSS7.5AI score0.76567EPSS
SaveExploits5
CVE
CVE
added 2021/07/20 10:44 p.m.237 views

CVE-2021-2394

CVE-2021-2394 affects Oracle WebLogic Server (Fusion Middleware, Core component). Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. Description: an unauthenticated, network-accessible vulnerability exploitable via T3/IIOP that can lead to takeover of WebLogic Server. ...

10CVSS9.5AI score0.76567EPSS
SaveExploits3References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/06/15 12:00 a.m.60 views

RHEL 7 : rh-postgresql12-postgresql (RHSA-2021:2394)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2394 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

8.8CVSS7AI score0.0199EPSS
SaveExploits2References10
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2013:0835-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.2258EPSS
SaveExploits6References3
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2013:0934-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.7AI score0.2258EPSS
SaveExploits6References3
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2012:0792-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.6AI score0.03976EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2013:0835-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.2258EPSS
SaveExploits6References3
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2013:0871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.2258EPSS
SaveExploits6References3
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2013:0871-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.2258EPSS
SaveExploits6References3
NVD
NVD
added 2018/02/14 12:29 p.m.22 views

CVE-2018-2394

Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files...

6.5CVSS6.6AI score0.01028EPSS
SaveExploits0References2
CVE
CVE
added 2018/02/14 12:00 p.m.63 views

CVE-2018-2394

CVE-2018-2394 affects SAP Internet Graphics Server (IGS) versions 7.20, 7.20EXT, 7.45, 7.49, 7.53. Under certain conditions, an unauthenticated attacker can prevent legitimate users from accessing services and/or system files. The initial description provides affected versions and impact but no e...

6.5CVSS6.5AI score0.01028EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/02/14 12:00 p.m.32 views

CVE-2018-2394

Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files...

6.6AI score0.01028EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.9 views

CVE-2015-2394

...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/04/10 12:00 a.m.289 views

Apple TV < 10.2 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.2. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in LibTIFF in the DumpModeEncode function within file tifdumpmode.c. An unauthenticated, remote attacker can exploi...

9.8CVSS7.6AI score0.09283EPSS
SaveExploits90References61
OSV
OSV
added 2017/04/02 1:59 a.m.12 views

CVE-2017-2394

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

8.8CVSS8.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 2017/04/02 1:36 a.m.26 views

CVE-2017-2394

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

8.2AI score0.01842EPSS
SaveExploits0References6
CVE
CVE
added 2017/04/02 1:36 a.m.109 views

CVE-2017-2394

CVE-2017-2394 affects Apple WebKit components used by Safari, iOS before 10.3, tvOS before 10.2. A crafted web page can cause remote arbitrary code execution or memory corruption leading to a crash. Apple addresses include Safari 10.1, iOS 10.3, and tvOS 10.2 security updates. If exploiting statu...

8.8CVSS8AI score0.01842EPSS
SaveExploits0References6Affected Software3
Debian CVE
Debian CVE
added 2017/04/02 1:36 a.m.33 views

CVE-2017-2394

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

8.8CVSS9.2AI score0.01842EPSS
SaveExploits0
Rows per page
Query Builder