61 matches found
CVE-2022-4848 Improper Verification of Source of a Communication Channel in usememos/memos
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4848
CVE-2022-4848 affects usememos/memos prior to 0.9.1. Root cause: improper verification of the source of a communication channel in the GitHub repository usememos/memos. Documented impact is an improper verification vulnerability; no exploit specifics are provided in the supplied sources. Remediat...
CVE-2022-4848 Improper Verification of Source of a Communication Channel in usememos/memos
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4848 Improper Verification of Source of a Communication Channel in usememos/memos
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2020-4848
IBM UrbanCode Deploy UCD 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to. IBM X-Force ID: 190293...
CVE-2020-4848
IBM UrbanCode Deploy (UCD) has a confirmed information-disclosure/privilege-elevation issue (CVE-2020-4848) affecting 6.2.7.9, 7.0.5.4, and 7.1.1.1. An authenticated user could initiate a plugin or compare process resources they should not access due to insufficient execute permissions. The IBM s...
Security Bulletin: CVE-2020-4848 Certain users can run auto-configure/compare on resources without execute permission
Summary Certain users can run auto-configure/compare on resources without execute permission Vulnerability Details CVEID: CVE-2020-4848 DESCRIPTION: IBM UrbanCode Deploy UCD could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to. CV...
Debian DSA-4848-1 : golang-1.11 - security update
Multiple security issues were discovered in the implementation of the Go programming language, which could result in denial of service and the P-224 curve implementation could generate incorrect outputs. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2020-10537
An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP port 4848. No password is required to access it with the administrator account...
Default configuration
An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP port 4848. No password is required to access it with the administrator account...
CVE-2020-10537
Epikur prior to 20.1.1 has an authorization issue: a Glassfish 4.1 server with a default configuration exposes the administrator account on TCP port 4848 without requiring a password, enabling potential admin access on affected hosts. This description is confirmed by the Red Hat entry; no specifi...
CVE-2013-4848
creationtimestamp| type| source ---|---|--- 2019-10-25 20:32:46+00:00| seen| https://t.me/cibsecurity/7676 2024-01-27 13:46:11+00:00| seen| https://t.me/ctinow/174763...
CVE-2013-4848
CVE-2013-4848 concerns TP-Link TL-WDR4300 (v3.13.31) with multiple CSRF vulnerabilities in the router’s web management interface. Connected sources consistently describe cross-site request forgery affecting the device, stemming from inadequate validation in the web application that could enable u...
Oracle GlassFish Server Open Source Edition 4.1 - Path Traversal Exploit
Exploit for windows platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Path Traversal in Oracle GlassFish Server Open Source Edition', 'Description' = %q This...
Oracle Glassfish OSE 4.1 - Path Traversal (Metasploit)
Oracle Glassfish OSE 4.1 - Path Traversal Metasploit Exploit title: Oracle Glassfish OSE 4.1 - Path Traversal Metasploit Author: Dhiraj Mishra Date: 2018-08-14 Software: Oracle Glassfish Server OSE Version: 4.1 Software link: http://download.oracle.com/glassfish/4.1/release/glassfish-4.1.zip CVE:...
Oracle Glassfish OSE 4.1 - Path Traversal (Metasploit)
Exploit title: Oracle Glassfish OSE 4.1 - Path Traversal Metasploit Author: Dhiraj Mishra Date: 2018-08-14 Software: Oracle Glassfish Server OSE Version: 4.1 Software link: http://download.oracle.com/glassfish/4.1/release/glassfish-4.1.zip CVE: 2017-1000028 This module requires Metasploit:...
CVE-2018-4848
CVE-2018-4848 affects Siemens SCALANCE X switches: X-200 family (incl. SIPLUS NET) before v5.2.3, X-200IRT before v5.4.1, X-200RNA before v3.2.7, and X-300 (incl. X408) before v4.1.3. Root cause: improper neutralization of input during web page generation (CWE-79) in the integrated configuration ...
Siemens SCALANCE X Switches (Update A)
1. EXECUTIVE SUMMARY CVSS v3 5.8 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SCALANCE X switches Vulnerabilities: Cross-site Scripting 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-163-02 Siemens SCALANCE X Switches that was...