Lucene search
+L

60 matches found

CVE
CVE
added 2021/02/17 1:29 p.m.65 views

CVE-2020-7848

The CVE-2020-7848 entry concerns the EFM ipTIME C200 IP Camera with a Command Injection flaw in /login.cgi?logout=1. An attacker can send a GET request to execute arbitrary OS commands via a crafted cookie value. CVSS data (2.0/3.1) indicates HIGH impact across confidentiality, integrity, and ava...

8CVSS8.1AI score0.01109EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/07/18 9:43 p.m.108 views

CVE-2019-7848

CVE-2019-7848 affects Adobe Campaign Classic up to version 18.10.5-8984. The issue is described as an inadequate access control vulnerability that could allow information disclosure in the context of the current user. Public sources in the connected set confirm affected product/version scope and ...

7.5CVSS7.1AI score0.03121EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2019/05/22 8:48 p.m.15 views

CVE-2018-7848

creationtimestamp| type| source ---|---|--- 2019-05-22 20:48:15+00:00| seen| https://t.me/cvemitreorg/153 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-01...

7.5CVSS7.1AI score0.03413EPSS
SaveExploits1References2
NVD
NVD
added 2019/05/22 8:29 p.m.27 views

CVE-2018-7848

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus...

7.5CVSS7.3AI score0.03413EPSS
SaveExploits1References2
OSV
OSV
added 2019/05/22 8:29 p.m.9 views

CVE-2018-7848

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus...

7.5CVSS5.8AI score0.03413EPSS
SaveExploits1References2
CVE
CVE
added 2019/05/22 7:59 p.m.86 views

CVE-2018-7848

CVE-2018-7848 is an information-disclosure flaw in Schneider Electric Modicon controllers (M580, M340, Quantum, Premium) exploitable via the UMAS strategy read path. A specially crafted UMAS read of the programmed strategy (function code 0x34) can reveal plaintext SNMP community strings and other...

7.5CVSS7.2AI score0.03413EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/05/22 7:59 p.m.38 views

CVE-2018-7848

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus...

7.3AI score0.03413EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 12:32 a.m.38 views

Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect IBM Virtualization Engine TS7700 (CVE-2015-7848, CVE-2015-7855)

Summary There are multiple vulnerabilities in the Network Time Protocol NTP implementation embedded within the IBM Virtualization Engine TS7700. Vulnerability Details CVEID: CVE-2015-7848 DESCRIPTION: Network Time Protocol NTP is vulnerable to a denial of service, caused by an multiple integer...

7.5CVSS1.2AI score0.31068EPSS
SaveExploits5Affected Software1
OSV
OSV
added 2018/06/11 9:29 p.m.8 views

CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

5.3CVSS8.4AI score
SaveExploits0References7
NVD
NVD
added 2018/06/11 9:29 p.m.18 views

CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

5.3CVSS5.3AI score0.01763EPSS
SaveExploits0References7
CVE
CVE
added 2018/06/11 9:00 p.m.122 views

CVE-2017-7848

CVE-2017-7848 affects Mozilla Thunderbird prior to 52.5.2. The issue allows RSS fields to inject new lines into the created email structure, altering the message body. Public entries and advisories confirm Thunderbird upgrades to 52.5.2 as the fix (e.g., CentOS/RHSA-2018:0061, Debian DSA-4075-1 a...

5.3CVSS6.1AI score0.01763EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2018/06/11 9:00 p.m.31 views

CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

5.3CVSS6.9AI score0.01763EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2018/01/30 12:00 a.m.40 views

Ubuntu: Security Advisory (USN-3529-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.0717EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2018/01/30 12:00 a.m.26 views

Ubuntu 14.04 LTS / 16.04 LTS : Thunderbird vulnerabilities (USN-3529-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3529-1 advisory. It was discovered that a From address encoded with a null character is cut off in the message header display. An attacker could potentially...

9.8CVSS7.8AI score0.0717EPSS
SaveExploits1References15
Cent OS
Cent OS
added 2018/01/08 4:07 p.m.71 views

thunderbird security update

CentOS Errata and Security Advisory CESA-2018:0061 An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

8.8CVSS7AI score0.01983EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2018/01/08 4:49 a.m.64 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.8CVSS7.1AI score0.01983EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2018/01/08 12:00 a.m.28 views

RHEL 6 / 7 : thunderbird (RHSA-2018:0061)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0061 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.5.2. Security Fixes:...

8.8CVSS7.7AI score0.01983EPSS
SaveExploits1References11
OpenVAS
OpenVAS
added 2018/01/08 12:00 a.m.32 views

RedHat Update for thunderbird RHSA-2018:0061-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.6AI score0.01983EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2018/01/02 9:19 a.m.32 views

CVE-2017-7848

RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird 52.5.2...

5.3CVSS3.5AI score0.01763EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/01/02 12:00 a.m.36 views

Mozilla Thunderbird < 52.5.2

The version of Thunderbird installed on the remote Windows host is prior to 52.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-30 advisory. - It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via View -...

9.3CVSS7.8AI score0.03174EPSS
SaveExploits1References6
Rows per page
Query Builder