Lucene search
+L

196 matches found

OSV
OSV
added 2015/04/13 2:59 p.m.10 views

CVE-2015-2940

Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...

6.5AI score
SaveExploits0References8
NVD
NVD
added 2015/04/13 2:59 p.m.16 views

CVE-2015-2940

Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...

6.8CVSS6.6AI score0.01095EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2015/04/13 2:00 p.m.41 views

CVE-2015-2940

Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...

6.8CVSS6.4AI score0.01095EPSS
SaveExploits0
CVE
CVE
added 2015/04/13 2:00 p.m.79 views

CVE-2015-2940

CVE-2015-2940 is a CSRF flaw in the MediaWiki CheckUser extension that can allow a remote attacker to hijack a user’s session and retrieve sensitive information. The connected advisories corroborate this as part of multiple vulnerabilities affecting MediaWiki, with remediation guidance to upgrade...

6.8CVSS6.6AI score0.01095EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2014/08/15 10:00 a.m.62 views

CVE-2014-2940

CVE-2014-2940 affects Cobham Sailor 900 and 6000 satellite terminals running firmware 1.08 MFHF / 2.11 VHF, where hardcoded administrator credentials are present. The NVD entry notes that an attacker could obtain full administrative control, with exploitation requiring either physical access to t...

10CVSS6.6AI score0.02215EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2014/08/15 10:00 a.m.37 views

CVE-2014-2940

Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access...

6.4AI score0.02215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2013/09/12 6:00 p.m.33 views

CVE-2013-2940

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

6.6AI score0.01648EPSS
SaveExploits0References1
CVE
CVE
added 2013/09/12 6:00 p.m.61 views

CVE-2013-2940

Technical details (affected product/component/version, root cause, exploit information) for CVE-2013-2940 are not publicly available in the provided connected documents. Monitor for updates.

10CVSS6.8AI score0.01648EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2012/09/10 12:00 a.m.41 views

Slackware: Security Advisory (SSA:2006-272-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.5AI score0.49273EPSS
SaveExploits10References2
CVE
CVE
added 2012/05/27 8:00 p.m.54 views

CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 is affected. The CVE-2012-2940 entry describes a denial of service (application crash) triggered by processing crafted image files in multiple formats (PNG, WMF, PSD, TGA, TTF, BMP, TIFF, PCX) remotely. The connected documents corroborate the same description acros...

4.3CVSS6.8AI score0.0248EPSS
SaveExploits2References3Affected Software1
Circl
Circl
added 2012/05/21 12:00 a.m.13 views

CVE-2012-2940

creationtimestamp| type| source ---|---|--- 2012-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18902...

4.3CVSS5.8AI score0.0248EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2012/03/01 12:00 a.m.34 views

GLSA-201202-08 : stunnel: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201202-08 stunnel: Arbitrary code execution An unspecified heap vulnerability was discovered in stunnel. Impact : The vulnerability may possibly be leveraged to perform remote code execution or a Denial of Service attack. Workarou...

9.3CVSS8.5AI score0.05711EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/09/21 12:00 a.m.27 views

FreeBSD Ports: stunnel

The remote host is missing an update to the system as announced in the referenced advisory. VID cdeb34e6-d00d-11e0-987e-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID cdeb34e6-d00d-11e0-987e-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

9.3CVSS0.1AI score0.05711EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/09/06 12:00 a.m.26 views

stunnel 4.4x < 4.42 Unspecified Memory Corruption

The version of stunnel 4.4x installed on the remote host is a version prior to 4.42. It is, therefore, affected by a memory corruption vulnerability that allows a remote attacker to cause a denial of service condition or execution of arbitrary code. C Tenable Network Security, Inc...

9.3CVSS8.6AI score0.05711EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2011/08/25 2:22 p.m.24 views

CVE-2011-2940

stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

9.3CVSS7.3AI score0.05711EPSS
SaveExploits0References2
CVE
CVE
added 2011/08/25 2:00 p.m.65 views

CVE-2011-2940

CVE-2011-2940 affects stunnel 4.x (notably 4.40/4.41) with an unspecified heap memory corruption vulnerability that can permit remote code execution or denial of service. Public bulletins cite fixes in later 4.x releases (e.g., 4.42) and advisories (Gentoo GLSA 201202-08) urging upgrades (to 4.44...

9.3CVSS7.8AI score0.05711EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
added 2011/08/25 2:00 p.m.30 views

CVE-2011-2940

stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

9.3CVSS7.6AI score0.05711EPSS
SaveExploits0
Cvelist
Cvelist
added 2011/08/25 2:00 p.m.31 views

CVE-2011-2940

stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

7.6AI score0.05711EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2011/01/24 12:00 a.m.23 views

Fedora Update for sssd FEDORA-2011-0337

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.1CVSS6.4AI score0.02023EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/12/02 12:00 a.m.24 views

Fedora Update for sssd FEDORA-2010-13474

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5.1CVSS6.5AI score0.02023EPSS
SaveExploits0References2
Rows per page
Query Builder