Lucene search
+L

3222 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/12/21 8:48 a.m.5 views

Improper certificate validation vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Overview The Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer contains improper certificate validation vulnerability. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the...

6.9AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/12/21 8:48 a.m.3 views

Cleartext Transmission of Sensitive Information Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Overview The Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer contains a cleartext transmission of sensitive information vulnerability due to incomplete document. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer t...

6.6AI score
SaveExploits0References2
CNVD
CNVD
added 2020/12/21 12:0 a.m.5 views

SolarWinds Database Performance Analyzer Cross-Site Scripting Vulnerability

SolarWinds Database Performance Analyzer is a set of database performance analyzers from SolarWinds Solarwinds, USA. The product is used for SQL query performance monitoring, analysis and tuning and so on. A cross-site scripting vulnerability exists in SolarWinds Database Performance Analyzer DPA...

5.4CVSS6.8AI score0.01359EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.9 views

The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems allows a attacker to gain access to protected information.

The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

5.5CVSS6.3AI score0.00324EPSS
SaveExploits0References3Affected Software2
ICS
ICS
added 2020/12/17 12:0 a.m.30 views

Emerson Rosemount X-STREAM

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Emerson Equipment: Rosemount X-STREAM Gas Analyzer Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker through a...

7.5CVSS7.9AI score0.01271EPSS
SaveExploits0References5
OSV
OSV
added 2020/12/15 11:15 p.m.8 views

CVE-2018-16243

SolarWinds Database Performance Analyzer DPA 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and central.cen...

5.4CVSS5.8AI score0.01359EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 11:15 p.m.27 views

CVE-2018-16243

SolarWinds Database Performance Analyzer DPA 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and central.cen...

5.4CVSS5.3AI score0.01359EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.14 views

SolarWinds Database Performance Analyzer 跨站脚本漏洞

SolarWinds Database Performance Analyzer is a set of database performance analyzers from SolarWinds Solarwinds, USA. The product is used for SQL query performance monitoring, analysis and tuning and so on. A cross-site scripting vulnerability exists in SolarWinds Database Performance Analyzer DPA...

5.4CVSS6AI score0.01359EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/12/14 12:0 a.m.13 views

Wireshark Memory Disclosure Vulnerability (CNVD-2021-11317)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory leak vulnerability exist...

5.3CVSS9.1AI score0.02784EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/12/14 12:0 a.m.46 views

Wireshark Denial of Service Vulnerability (CNVD-2021-11319)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. Wireshark has a denial of service...

5.3CVSS8.1AI score0.02589EPSS
SaveExploits1References1
Gentoo Linux
Gentoo Linux
added 2020/11/11 12:0 a.m.51 views

Wireshark: Multiple vulnerabilities

Background Wireshark is a network protocol analyzer formerly known as ethereal. Description Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There...

7.5CVSS3.4AI score0.03116EPSS
SaveExploits0
Citrix
Citrix
added 2020/11/09 12:0 a.m.38 views

Citrix MSI Log Analyzer

Citrix MSI Log Analyzer v1.2.0.9 Created Date: Dec 04, 2017 Updated Date:May 29, 2019 To help us improve the tool, please send your feedback tohttps://podio.com/webforms/18778954/1263577. Please note: You can download the required file from the Citrix downloads website by visiting the following...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2020/11/09 12:0 a.m.10 views

RTOP Analyzer

RTOP Analyzer - v2.1.0.0 Created Date: Jun 22, 2016 Updated Date: Apr 30, 2018 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the downloa...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.8 views

The vulnerability of the mfr_print() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the mfrprint function in the tcpdump network traffic capture and analysis utility is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.5AI score0.03891EPSS
SaveExploits0References15Affected Software6
OSV
OSV
added 2020/11/04 6:15 p.m.1 views

DEBIAN-CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory...

7.5CVSS7.1AI score0.03109EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2020/11/03 11:30 a.m.52 views

Webshell-Analyzer - Web Shell Scanner And Analyzer

Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project http://github.com/tstillz/webshell-scan, which only...

7AI score
SaveExploits0References3
Debian
Debian
added 2020/10/31 9:5 p.m.160 views

[SECURITY] [DLA 2423-1] wireshark security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2423-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...

7.5CVSS8.5AI score0.05803EPSS
SaveExploits6
Cent OS
Cent OS
added 2020/10/20 6:13 p.m.269 views

hunspell security update

CentOS Errata and Security Advisory CESA-2020:3971 An update for hunspell is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

6.5CVSS6.3AI score0.01649EPSS
SaveExploits1References7
NVD
NVD
added 2020/10/13 4:15 p.m.28 views

CVE-2020-15797

A vulnerability has been identified in DCA Vantage Analyzer All versions V4.5 are affected by CVE-2020-7590. In addition, serial numbers 40000 running software V4.4.0 are also affected by CVE-2020-15797. Improper Access Control could allow an unauthenticated attacker to escape from the restricted...

7.2CVSS0.00384EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/13 4:15 p.m.26 views

CVE-2020-7590

A vulnerability has been identified in DCA Vantage Analyzer All versions V4.5 are affected by CVE-2020-7590. In addition, serial numbers 40000 running software V4.4.0 are also affected by CVE-2020-15797. Affected devices use a hard-coded password to protect the onboard database. This could allow ...

6.8CVSS0.00353EPSS
SaveExploits0References1
Rows per page
Query Builder