Lucene search
+L

101 matches found

Vulnrichment
Vulnrichment
added 2022/12/07 12:0 a.m.3 views

CVE-2022-4341 csliuwy coder-chain_gdut cross site scripting

A vulnerability has been found in csliuwy coder-chaingdut and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /back/index.php/user/User/?1. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

3.5CVSS4.2AI score0.00411EPSS
SaveExploits1References2
CVE
CVE
added 2022/12/07 12:0 a.m.51 views

CVE-2022-4341

CVE-2022-4341 affects the csliuwy coder-chain_gdut project. The vulnerability is a cross-site scripting (XSS) in an unknown functionality of /back/index.php/user/User/?1, caused by manipulation of that function. It can be exploited remotely and the exploit has been disclosed publicly (VDB-215095)...

6.1CVSS4.9AI score0.00411EPSS
SaveExploits1References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/23 7:48 p.m.63 views

Security Bulletin: IBM Security Network Intrusion Prevention System is affected by krb5 vulnerabilities (CVE-2014-4341, CVE-2013-1418 )

Summary Security vulnerabilities have been discovered in krb5 used with IBM Security Intrusion Prevention System. Vulnerability Details CVEID: CVE-2014-4341 DESCRIPTION: MIT Kerberos is vulnerable to a denial of service, caused by a NULL pointer dereference. By injecting invalid tokens into a...

5CVSS6.6AI score0.07138EPSS
SaveExploits0Affected Software1
Rapid7 Blog
Rapid7 Blog
added 2021/10/15 6:49 p.m.55 views

Metasploit Wrap-Up

An Especially Spooky Season for Moodle This release has not one, two, or three, but FOUR authenticated Moodle exploit modules, or should I say moodules? H00die comes through again with not just modules, but also an artisanal, bespoke library to support further work. Two target the spell check...

9CVSS9.2AI score0.24173EPSS
SaveExploits21
Circl
Circl
added 2021/10/11 10:36 p.m.11 views

CVE-2013-4341

creationtimestamp| type| source ---|---|--- 2021-10-11 22:36:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodlespellingbinaryrce.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:19+00:00| seen...

4.3CVSS8.1AI score0.21862EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2014:0989-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.07138EPSS
SaveExploits0References2
CVE
CVE
added 2020/06/24 2:10 p.m.43 views

CVE-2020-4341

IBM Security Secret Server (affected: 10.7 and earlier) exposes sensitive information via detailed error messages returned in the browser, enabling remote disclosure of confidential data. Root cause: information disclosure from verbose technical errors. Impact: partial confidentiality loss. remed...

5.3CVSS4.8AI score0.01416EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/06/22 7:47 p.m.18 views

Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server (CVE-2020-4341)

Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.8. Vulnerability Details CVEID: CVE-2020-4341 DESCRIPTION: IBM Security Secret Server could allow a remote attacker to obtain sensitive information when a detailed technical error messag...

5.3CVSS1.5AI score0.01416EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2020/04/29 12:0 a.m.28 views

Ubuntu: Security Advisory (USN-4341-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.03455EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/04/29 12:0 a.m.38 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerabilities (USN-4341-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4341-1 advisory. Andrei Popa discovered that Samba incorrectly handled certain LDAP queries. A remote attacker could use this issue to cause Samba...

7.5CVSS7.7AI score0.03455EPSS
SaveExploits0References3
CVE
CVE
added 2019/04/03 5:43 p.m.91 views

CVE-2018-4341

CVE-2018-4341 is a memory corruption vulnerability addressed by Apple with improved memory handling in the I/O subsystem. The affected surface includes Apple OS components (notably macOS/iOS variants mapping to macOS Mojave 10.14 and iOS 12-era builds) as listed in Apple security content: the iss...

8.6CVSS7.4AI score0.00928EPSS
SaveExploits0References5Affected Software4
CVE
CVE
added 2018/03/16 2:4 p.m.30 views

CVE-2017-4341

CVE-2017-4341 is rejected and not used per the Initial Description.

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2018/03/16 2:4 p.m.9 views

CVE-2017-4341

...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/01/11 12:0 a.m.27 views

F5 Networks BIG-IP : MIT Kerberos 5 vulnerability (K15552)

MIT Kerberos 5 aka krb5 before 1.12.2 allows remote attackers to cause a denial of service buffer over-read and application crash by injecting invalid tokens into a GSSAPI application session. CVE-2014-4341 Impact A remote attacker may be able to cause a denial of service DoS by injecting invalid...

5CVSS7.4AI score0.07138EPSS
SaveExploits0References2
NVD
NVD
added 2017/02/07 5:59 p.m.16 views

CVE-2016-4341

NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...

7.5CVSS7.3AI score0.01915EPSS
SaveExploits0References1
CVE
CVE
added 2017/02/07 5:0 p.m.53 views

CVE-2016-4341

NetApp Clustered Data ONTAP prior to version 8.3.2P7 is affected by CVE-2016-4341. The vulnerability allows remote attackers to obtain SMB share information via unspecified vectors, implying an information-disclosure risk. The issue affects ONTAP in the clustering (clustered) deployment and is mi...

7.5CVSS7.2AI score0.01915EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2016/05/04 12:0 a.m.22 views

Cisco NX-OS Software Locator/ID Separation Protocol Packet Denial of Service Vulnerability (cisco-sa-20160323-lisp)

A vulnerability in the Locator/ID Separation Protocol LISP of Cisco NX-OS Software running on the Cisco Nexus 7000 and Nexus 7700 Series Switches with an M1 Series Gigabit Ethernet Module could allow an unauthenticated, remote attacker to cause a reload of the vulnerable device. Copyright C 2016...

7.8CVSS7.6AI score0.03717EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/03/26 12:0 a.m.6 views

Cisco IOS Software and Cisco NX-OS Software Locator/ID Separation Protocol Denial of Service Vulnerability

Cisco IOS and Cisco NX-OS are network operating systems that run in Cisco's switch products. A denial of service vulnerability exists in the LISP of Cisco IOS Software and Cisco NX-OS Software running on multiple Cisco devices. A remote attacker could exploit this vulnerability to cause a denial ...

7.8CVSS6.8AI score0.03717EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2016/03/23 12:0 a.m.7 views

PT-2016-1615 · Cisco · Cisco Ios +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 15.1 through 15.2 Cisco NX-OS versions 4.1 through 6.2 Description: The Locator/ID Separation Protocol LISP implementation in Cisco IOS and NX-OS allows remote attackers to cause a denial of service device reload via a...

7.8CVSS7.2AI score0.03717EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.27 views

Oracle: Security Advisory (ELSA-2014-1389)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS6.6AI score0.08085EPSS
SaveExploits0References2
Rows per page
Query Builder