10183 matches found
Siemens SINEMA Server
1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINEMA Server Vulnerability: Incorrect Privilege Assignment 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with a valid session, with...
CVE-2019-7238
creationtimestamp| type| source ---|---|--- 2020-01-13 11:32:24+00:00| published-proof-of-concept| https://t.me/antichat/7622 2020-10-09 14:02:27+00:00| seen| MISP/a7dc7e1f-c171-47fd-bf71-659164ee8d30 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04...
Fortinet FortiSIEM CVE-2019-16153 Hardcoded Credentials Vulnerability
Description Fortinet FortiSIEM is prone to a hard-coded credentials vulnerability. An attacker can exploit this issue to gain unauthorized access to the vulnerable device and perform unauthorized actions. Versions prior to Fortinet FortiSIEM 5.2.6 are vulnerable. Technologies Affected Fortinet...
Citrix SD-WAN CVE-2020-6175 Information Disclosure Vulnerability
Description Citrix SD-WAN Appliance is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. The following products and versions are vulnerable: NetScaler SD-WAN 10.0.x and prior Citrix SD-WAN 10.1.x are...
Cisco Vision Dynamic Signage Director CVE-2019-16004 Authentication Bypass Vulnerability
Description Cisco Vision Dynamic Signage Director is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions with administrative privileges. This may lead to further attacks. This issue is being tracke...
Cisco Emergency Responder CVE-2019-16025 HTML Injection Vulnerability
Description Cisco Emergency Responder is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to...
Cisco UCS Director CVE-2019-16003 Information Disclosure Vulnerability
Description Cisco UCS Director is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco bug ID CSCvr00602. Technologies Affected Cisco UCS Director 4.0.0.0 Cisco UC...
Cisco IP Phone 6800/7800/8800 Series with Multiplatform Firmware Cross Site Scripting Vulnerability
Description Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware are prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...
Fortinet FortiAuthenticator CVE-2019-16154 Cross Site Scripting Vulnerability
Description Fortinet FortiAuthenticator is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
CVE-2013-3944
creationtimestamp| type| source ---|---|--- 2020-01-02 22:49:10+00:00| seen| https://t.me/cibsecurity/8963...
Microsoft Windows '.Group' File Handling Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows Recommendatio...
GitLab Multiple Security Vulnerabilities
Description GitLab is prone to multiple security vulnerabilities. An attacker can exploit these issues to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. GitLab versions prior to 11.4.13, 11.5.x prior to 11.5.6, and 11.6.x prior to 11.6.1 are...
MyBB CVE-2019-20225 Open Redirection Vulnerability
Description MyBB is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks...
Microsoft Exchange Server '/Autodiscover' Server Side Request Forgery Security Bypass Vulnerability
Description Microsoft Exchange Server is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Microsoft Exchange Server 2013 Cumulative Update 22 and prior versions are...
WordPress GDPR Cookie Compliance Plugin Multiple Security Vulnerabilities
Description The GDPR Cookie Compliance plugin for WordPress is prone to an unauthorized-access and a cross-site request-forgery vulnerability. An attacker can exploit these issues to perform certain unauthorized actions and gain unauthorized access. This may lead to further attacks. GDPR Cookie...
WordPress bbPress Members Only Plugin Cross Site Request Forgery Vulnerability
Description The 'bbPress Members Only' Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. The 'bbPress Members Only'...
WECON PLC Editor
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: WECON Equipment: PLC Editor Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation could allow an attacker to execute code under the privileges of the application. 3. TECHNICAL DETAILS...
Multiple Dell EMC Products CVE-2019-18588 Cross Site Scripting Vulnerability
Description Multiple Dell EMC products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Rack CVE-2019-16782 Information Disclosure Vulnerability
Description Rack is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Rack Project Rack 0.1 Rack Project Rack 0.2 Rack Project Rack 0.3 Rack Project Rack 0.4 Rack Project Rack...
Apache Tomcat CVE-2019-17563 Session Fixation Vulnerability
Description Apache Tomcat is prone to a session-fixation vulnerability. An attacker can exploit this issue to hijack an arbitrary session and gain unauthorized access to the affected application. Apache Tomcat versions 9.0.0.M1 through 9.0.29 are vulnerable. Technologies Affected Apache Tomcat...