Lucene search
+L

2289 matches found

CNVD
CNVD
added 2015/08/21 12:0 a.m.66 views

OpenStack Image Service (kilo) Directory Traversal Vulnerability

OpenStack is the massively scalable cloud operating system. A directory traversal vulnerability in OpenStack Image Service 2015.1.x version kilo prior to 2015.1.2 allows an authenticated, remote user to read arbitrary files from a backup file created with the "qcow2" image...

3.5CVSS6.8AI score0.01499EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/08/19 12:0 a.m.58 views

Oracle MySQL 5.5.x < 5.5.44 Multiple Vulnerabilities (July 2015 CPU) (October 2015 CPU)

The version of Oracle MySQL installed on the remote host is 5.5.x prior to 5.5.44. It is, therefore, affected by the following vulnerabilities : - Multiple denial of service vulnerabilities exist in the following subcomponents which can be exploited by an authenticated, remote attacker : - DML...

4.3CVSS7.2AI score0.04715EPSS
SaveExploits0References14
CNVD
CNVD
added 2015/07/23 12:0 a.m.8 views

HP System Management Homepage Cross-Site Request Forgery Vulnerability

HP System Management Homepage is a Web-based interface released by Hewlett-Packard HP. The interface consolidates and simplifies the single system management process SMH for HP servers running HP-UX, Linux and Microsoft Windows operating systems. A cross-site request forgery vulnerability exists ...

6CVSS6.9AI score0.00924EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/07/21 12:0 a.m.33 views

Oracle MySQL Multiple Unspecified Vulnerabilities-03 (Jul 2015)

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS7AI score0.04715EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2015/07/14 12:0 a.m.67 views

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution CVEs: CVE-2015-1560, CVE-2015-1561 Vendor: Merethis - www.centreon.com Product: Centreon Version affected: 2.5.4 and prior Product description: Centreon is the choice of some of the world's largest companies...

7.5CVSS0.3AI score0.09146EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2015/06/01 12:0 a.m.7 views

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the xorg-x11-server-Xvfb-1.15.0 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a malicious...

6.5CVSS6.4AI score0.05192EPSS
SaveExploits0References14
CNVD
CNVD
added 2015/05/28 12:0 a.m.5 views

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. A cross-site scripting vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which allows remote, authenticated users to inject arbitrary web script or HTML via reference parameters...

3.5CVSS5.7AI score0.01548EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/05/07 12:0 a.m.6 views

Unspecified Code Injection Vulnerability in phpMyBackupPro (CNVD-2015-02947)

phpMyBackupPro is a professional MySql backup tool. phpMyBackupPro suffers from unspecified code injection, which allows an authenticated remote attacker to exploit a vulnerability to inject arbitrary PHP code and execute it with WEB privileges...

8.8CVSS7.5AI score0.01972EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/05/07 12:0 a.m.6 views

Unspecified code injection vulnerability in phpMyBackupPro (CNVD-2015-02946)

phpMyBackupPro is a professional MySql backup tool. phpMyBackupPro suffers from unspecified code injection, which allows an authenticated remote attacker to exploit a vulnerability to inject arbitrary PHP code and execute it with WEB privileges...

7.5CVSS7.5AI score0.01226EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.5 views

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Subversion package up to version 1.6.4 of the Gentoo Linux operating system can be exploited by a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious...

8.5CVSS7.5AI score0.05112EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.14 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cgit-debuginfo package in the OpenSUSE operating system can be exploited by a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious person who has complete...

6.5CVSS7.7AI score0.03383EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.11 views

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information

Multiple vulnerabilities exist in the 389-ds-base-1.2.10.2 package of the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities can lead to breaches of the confidentiality of protected information. These vulnerabilities can be exploited remotely by a malicious individua...

2.1CVSS5.5AI score0.01329EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.10 views

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the subversion-devel-1.4.2 package for the CentOS operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

8.5CVSS7.6AI score0.05112EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.8 views

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the openldap-clients-2.3.43 package for the CentOS operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

4.6CVSS5.5AI score0.02593EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.14 views

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the xorg-x11-server-Xephyr-1.7.7 package of the CentOS operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have completed the...

8.5CVSS7.2AI score0.05347EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.8 views

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libpq5-x86 package of the SUSE Linux Enterprise operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a malicious individual who has...

8.5CVSS7.7AI score0.54312EPSS
SaveExploits4References4
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.11 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the 389-ds-base-libs-1.2.11.15 package of the Red Hat Enterprise Linux operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual wh...

6.5CVSS5.5AI score0.0219EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.10 views

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kdenetwork-kopete-libs-4.10.5 package for the CentOS operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a malicious individual who...

6.5CVSS7.8AI score0.0783EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.9 views

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the quagga-devel-0.98.3 package for the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotel...

6.5CVSS5.5AI score0.04041EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.14 views

The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information

The vulnerability of the quagga package up to version 0.98.6-r2 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the authentication process...

6.3CVSS7.7AI score0.0174EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder