Lucene search
+L

194 matches found

Circl
Circl
added 2024/03/18 8:11 a.m.16 views

CVE-2014-4539

creationtimestamp| type| source ---|---|--- 2024-03-18 08:11:25+00:00| seen| https://t.me/ctinow/210254...

6.1CVSS6.4AI score0.03983EPSS
SaveExploits2References1
NVD
NVD
added 2024/02/15 9:15 a.m.27 views

CVE-2023-4539

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. This issue affects ERP XL: from 2020.2.2 through 2023....

7.5CVSS7.6AI score0.00515EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/15 8:32 a.m.39 views

CVE-2023-4539 Hardcoded password in Comarch ERP XL

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. This issue affects ERP XL: from 2020.2.2 through 2023....

7.5CVSS7.8AI score0.00515EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/15 8:32 a.m.50 views

CVE-2023-4539

The connected Red Hat advisories confirm CVE-2023-4539 is a hard-coded password flaw in Comarch ERP XL installations, enabling retrieval of embedded sensitive data via a special database account created during installation. Affected scope: ERP XL versions 2020.2.2–2023.2. The root cause is a univ...

7.5CVSS7.6AI score0.00515EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/09/14 7:16 p.m.8 views

CVE-2018-4539

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/08/28 12:00 a.m.33 views

Rocky Linux 8 : postgresql:10 (RLSA-2023:4539)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4539 advisory. - schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with...

7.2CVSS6.7AI score0.0119EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/08/15 12:00 a.m.37 views

Oracle Linux 8 : postgresql:10 (ELSA-2023-4539)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4539 advisory. - Backport fixes for CVE-2023-2454 and CVE-2023-2455 - Resolves: CVE-2022-2625 - Resolves: CVE-2022-1552 - Resolves: CVE-2021-23214 Tenable has extract...

8.8CVSS6.6AI score0.1597EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/08/09 12:00 a.m.26 views

AlmaLinux 8 : postgresql:10 (ALSA-2023:4539)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4539 advisory. postgresql: schemaelement defeats protective searchpath changes CVE-2023-2454 postgresql: row security policies disregard user ID changes after inlining...

7.2CVSS6.5AI score0.0119EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/08/08 12:00 a.m.31 views

RHEL 8 : postgresql:10 (RHSA-2023:4539)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4539 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: schemaelement defeats protective...

7.2CVSS6.6AI score0.0119EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/03/10 12:00 a.m.22 views

PT-2022-4539 · Xen +5 · Xen +5

Name of the Vulnerable Software and Affected Versions: Xen hypervisor affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the scsifront driver of the Xen hypervisor. Exploitation of this issue may allow an attacker to cause a...

8.8CVSS7.5AI score0.94921EPSS
SaveExploits227References603
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:00 a.m.36 views

AlmaLinux 8 : pcre2 (ALSA-2020:4539)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4539 advisory. - An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode...

7.5CVSS6.7AI score0.01561EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2014-0426)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.8AI score0.05412EPSS
SaveExploits6References12
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2012:1486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.4AI score0.00443EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.33 views

SUSE: Security Advisory (SUSE-SU-2012:1503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS5.8AI score0.03718EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.54 views

SUSE: Security Advisory (SUSE-SU-2012:1487-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.4AI score0.00443EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:00 a.m.42 views

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

7.5CVSS6.2AI score0.01561EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/12 12:00 a.m.28 views

Oracle Linux 8 : pcre2 (ELSA-2020-4539)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4539 advisory. 10.32-2 - Fix CVE-2019-20454 a crash when \X is used without UTF mode in a JIT bug 1734468 Tenable has extracted the preceding description block directly from t...

7.5CVSS6.3AI score0.01561EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:00 a.m.65 views

RHEL 8 : pcre2 (RHSA-2020:4539)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4539 advisory. The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching...

7.5CVSS6.3AI score0.01561EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2020/09/25 12:00 a.m.31 views

Ubuntu 20.04 LTS : AWL vulnerability (USN-4539-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4539-1 advisory. Andrew Bartlett discovered that DAViCal Andrew's Web Libraries AWL did not properly manage session keys. An attacker could possibly use this issue to impersonate ...

7.5CVSS7.8AI score0.01588EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/10 1:15 p.m.14 views

CVE-2020-4539

IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.1CVSS5.4AI score0.0073EPSS
SaveExploits0References2
Rows per page
Query Builder