Lucene search
+L

27 matches found

OSV
OSV
added 2021/01/13 5:12 p.m.3 views

OPENSUSE-SU-2021:0054-1 Security update for hawk2

This update for hawk2 fixes the following security issue: - CVE-2020-35458: Fixed an insufficient input handler that could have led to remote code execution bsc1179998. This update was imported from the SUSE:SLE-15:Update update project...

10CVSS9.8AI score0.05333EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/01/13 12:00 a.m.16 views

Security update for hawk2 (important)

openSUSE Security Update: Security update for hawk2 Announcement ID: openSUSE-SU-2021:0054-1 Rating: important References: 1179998 Cross-References: CVE-2020-35458 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for hawk2 fix...

10CVSS9.6AI score0.05333EPSS
SaveExploits0References1
Circl
Circl
added 2021/01/12 6:52 p.m.13 views

CVE-2020-35458

creationtimestamp| type| source ---|---|--- 2021-01-12 18:52:28+00:00| seen| https://t.me/cibsecurity/21941...

10CVSS8.5AI score0.05333EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/12 3:15 p.m.18 views

CVE-2020-35458

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawkremembermeid parameter in the loginfromcookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser...

9.8CVSS7.6AI score
SaveExploits0References4
CVE
CVE
added 2021/01/12 2:21 p.m.152 views

CVE-2020-35458

CVE-2020-35458 affects ClusterLabs Hawk 2.x up to 2.3.0-x. The flaw is a Ruby shell code injection via the hawk_remember_me_id parameter in the login_from_cookie cookie. This allows unauthenticated remote attackers to execute code as user hauser, leveraging the user logout routine. Red Hat and SU...

10CVSS9.6AI score0.05333EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/01/12 1:34 p.m.6 views

SUSE-SU-2021:0089-1 Security update for hawk2

This update for hawk2 fixes the following security issue: - CVE-2020-35458: Fixed an insufficient input handler that could have led to remote code execution bsc1179998...

10CVSS9.8AI score0.05333EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2015/10/22 12:52 p.m.13 views

tonytemplates.com XSS vulnerability

Vulnerable URL: https://www.tonytemplates.com/reminder.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35458 Google Pagerank| 2 VIP website status:| Yes Check tonytemplates.com...

6.3AI score
SaveExploits0
Rows per page
Query Builder