Lucene search
+L

74 matches found

Packet Storm
Packet Storm
added 2023/05/15 12:0 a.m.382 views

FLEX Denial Of Service

Exploit Title: FLEX 1080 1085 Web 1.6.0 - Denial of Service Date: 2023-05-06 Exploit Author: Mr Empy Vendor Homepage: https://www.tem.ind.br/ Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94 Version: 1.6.0 Tested on: Android CVE ID: CVE-2022-2591 !/usr/bin/env python3 import request...

7.5CVSS7.1AI score0.06724EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2023/05/13 12:0 a.m.324 views

FLEX 1080 < 1085 Web 1.6.0 - Denial of Service

Exploit Title: FLEX 1080 1085 Web 1.6.0 - Denial of Service Date: 2023-05-06 Exploit Author: Mr Empy Vendor Homepage: https://www.tem.ind.br/ Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94 Version: 1.6.0 Tested on: Android CVE ID: CVE-2022-2591 !/usr/bin/env python3 import request...

7.5CVSS7.3AI score0.06724EPSS
SaveExploits4
0day.today
0day.today
added 2023/05/12 12:0 a.m.191 views

FLEX 1080 < 1085 Web 1.6.0 - Denial of Service Exploit

Exploit Title: FLEX 1080 1085 Web 1.6.0 - Denial of Service Exploit Author: Mr Empy Vendor Homepage: https://www.tem.ind.br/ Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94 Version: 1.6.0 Tested on: Android CVE ID: CVE-2022-2591 !/usr/bin/env python3 import requests import re impor...

7.5CVSS7.1AI score0.06724EPSS
SaveExploits4
Circl
Circl
added 2023/05/09 2:38 p.m.10 views

CVE-2023-2591

creationtimestamp| type| source ---|---|--- 2023-05-09 14:38:27+00:00| seen| https://t.me/cibsecurity/63579...

7.1CVSS6AI score0.00607EPSS
SaveExploits2References1
NVD
NVD
added 2023/05/09 10:15 a.m.34 views

CVE-2023-2591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...

7.1CVSS6AI score0.00607EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2023/05/09 12:0 a.m.36 views

CVE-2023-2591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...

7.1CVSS5.7AI score0.00607EPSS
SaveExploits2References2
CVE
CVE
added 2023/05/09 12:0 a.m.130 views

CVE-2023-2591

CVE-2023-2591 affects nilsteampassnet/teampass prior to 3.0.7. A stored HTML injection in the item label enables cross-site scripting when two users share the same folder access; viewing the affected item may redirect users to an attacker’s site or capture data via a form. The issue is fixed in 3...

7.1CVSS5.7AI score0.00607EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2023/05/09 12:0 a.m.21 views

CVE-2023-2591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...

7.1CVSS6.3AI score0.00607EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2023/05/08 12:0 a.m.16 views

TeamPass < 3.0.7 Multiple Vulnerabilities

TeamPass is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"; ifdescription...

7.1CVSS5.6AI score0.00612EPSS
SaveExploits3References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:52 a.m.3 views

SUSE CVE-2017-2591

389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniquenessentrytoconfig function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap...

7.5CVSS7.1AI score0.0297EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/07/31 12:0 a.m.43 views

CVE-2022-2591 TEM FLEX-1085 reboot denial of service

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS7.8AI score0.06724EPSS
SaveExploits4References2
CVE
CVE
added 2022/07/31 12:0 a.m.68 views

CVE-2022-2591

CVE-2022-2591 is tied to TEM FLEX-1085 version 1.6.0, where an unknown function in the file /sistema/flash/reboot can be manipulated to cause a denial of service. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly (e.g., PacketStorm/Exploit-DB entries). Multi...

7.5CVSS7.6AI score0.06724EPSS
SaveExploits4References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.52 views

Rocky Linux 8 : edk2 (RLSA-2021:2591)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2591 advisory. - A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CVE-2021-28211 Note that Nessus has not tested for this issue but has instead relied only on t...

6.7CVSS6.3AI score0.00386EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2017-0028)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6AI score0.0297EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/08/04 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2021:2591-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.00638EPSS
SaveExploits3References14
Tenable Nessus
Tenable Nessus
added 2021/06/30 12:0 a.m.30 views

Oracle Linux 8 : edk2 (ELSA-2021-2591)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2591 advisory. 20200602gitca407c7246bf-4.el84.1 - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch bz1952953 - Resolves: bz1952953 edk2: possible heap corruptio...

6.7CVSS6.4AI score0.00386EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/06/29 12:0 a.m.51 views

RHEL 8 : edk2 (RHSA-2021:2591)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2591 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...

6.7CVSS6.5AI score0.00386EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2021/01/29 12:0 a.m.41 views

CentOS 8 : ghostscript (CESA-2019:2591)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2591 advisory. - ghostscript: Safer mode bypass by .forceput exposure in .pdfhookDSCCreator 701445 CVE-2019-14811 - ghostscript: Safer mode bypass by .forceput exposu...

9.8CVSS7.6AI score0.11397EPSS
SaveExploits2References5
CVE
CVE
added 2020/01/15 4:34 p.m.56 views

CVE-2020-2591

CVE-2020-2591 affects Oracle Web Applications Desktop Integrator (component: Application Service) in Oracle E-Business Suite, version 12.1.3. The CVSS 3.0 base score is 8.2 (HIGH) with network access required and user interaction, potentially leading to unauthorized read/write of data and broader...

8.2CVSS8.2AI score0.01314EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
added 2020/01/14 12:0 a.m.50 views

Oracle E-Business Suite CVE-2020-2591 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in 'Oracle Web Applications Desktop Integrator' product. This vulnerability can be exploited over the 'HTTP' protocol. The 'Application Service' component is affected. This vulnerability affects the following supporte...

8AI score0.01314EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder