Lucene search
+L

17470 matches found

Prion
Prion
•added 2023/05/04 9:15 p.m.•24 views

Improper access control

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

3.2CVSS6.7AI score0.00128EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•47 views

CVE-2023-21490

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

4.7CVSS7AI score0.00128EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/04 12:00 a.m.•18 views

CVE-2023-21490

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

4.7CVSS6.8AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/05/04 12:00 a.m.•7 views

PT-2023-18244

Name of the Vulnerable Software and Affected Versions GearManagerStub versions prior to SMR May-2023 Release 1 Description The issue is related to improper access control in GearManagerStub, allowing a local attacker to delete applications installed by watchmanager. Recommendations For versions...

7.1CVSS0.00128EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•8 views

CVE-2023-21490: Improper Access Control

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

7.1CVSS5.8AI score0.00128EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2023/05/02 11:40 a.m.•6 views

Why Telecoms Struggle with SaaS Security

The telecom industry has always been a tantalizing target for cybercriminals. The combination of interconnected networks, customer data, and sensitive information allows cybercriminals to inflict maximum damage through minimal effort. It's the breaches in telecom companies that tend to have a...

6.5AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/05/02 11:40 a.m.•37 views

Why Telecoms Struggle with SaaS Security

The telecom industry has always been a tantalizing target for cybercriminals. The combination of interconnected networks, customer data, and sensitive information allows cybercriminals to inflict maximum damage through minimal effort. It's the breaches in telecom companies that tend to have a...

6.7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/05/02 12:00 a.m.•30 views

SUSE: Security Advisory (SUSE-SU-2023:2077-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.27076EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2023/05/02 12:00 a.m.•33 views

SUSE: Security Advisory (SUSE-SU-2023:2078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.27076EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2023/05/01 3:30 p.m.•40 views

Apache StreamPark LDAP Injection vulnerability

Apache StreamPark versions 1.0.0 to 2.0.0 have an LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements...

5.4CVSS6.8AI score0.01103EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2023/05/01 3:15 p.m.•30 views

CVE-2022-45801

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

5.4CVSS6.2AI score0.01103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/01 2:50 p.m.•13 views

CVE-2022-45801 Apache StreamPark (incubating): LDAP Injection Vulnerability

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

8.1AI score0.01103EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/05/01 2:50 p.m.•12 views

CVE-2022-45801 Apache StreamPark (incubating): LDAP Injection Vulnerability

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

6.1AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/05/01 2:50 p.m.•47 views

CVE-2022-45801 Apache StreamPark (incubating): LDAP Injection Vulnerability

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

6.4AI score0.01103EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2023/05/01 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2023:2068-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.4AI score0.00426EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2023/05/01 12:00 a.m.•18 views

SUSE: Security Advisory (SUSE-SU-2023:2069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.4AI score0.00426EPSS
SaveExploits1References4
Krebs on Security
Krebs on Security
•added 2023/04/28 2:09 a.m.•39 views

Many Public Salesforce Sites are Leaking Private Data

A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows an...

6.5AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/04/28 12:00 a.m.•30 views

SUSE: Security Advisory (SUSE-SU-2023:2051-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.05552EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2023/04/27 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2023:2048-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.03753EPSS
SaveExploits6References8
osv_cve
osv_cve
•added 2023/04/26 9:15 p.m.•21 views

CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

6.1CVSS5.8AI score0.0941EPSS
SaveExploits0References1
Rows per page
Query Builder