Lucene search
+L

11 matches found

Cvelist
Cvelist
•added 2026/10/05 4:12 p.m.•42 views

CVE-2026-102779 Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4

Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task records.customaction without authentication, ACL, CSRF, task-trigger, content-binding, or cron-token enforcement. A Guest can supply...

6.9CVSS0.00385EPSS
SaveExploits0References1
NVD
NVD
•added 2021/08/11 9:15 p.m.•23 views

CVE-2020-25564

In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave Automation Tasks feature...

8.8CVSS0.01247EPSS
SaveExploits1References2
Prion
Prion
•added 2021/08/11 9:15 p.m.•27 views

Design/Logic Flaw

In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...

7.5CVSS9.1AI score0.0156EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/08/11 8:22 p.m.•59 views

CVE-2020-25564

CVE-2020-25564 : A privilege escalation in SapphireIMS 5.0 allows a non-privileged user to create a local administrator on any client by directly accessing the RemoteMgmtTaskSave (Automation Tasks) feature. The root cause is insufficient access control in the Automation Tasks pathway. Impact repo...

8.8CVSS8.4AI score0.01247EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/08/11 8:21 p.m.•41 views

CVE-2020-25563

In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...

9.2AI score0.0156EPSS
SaveExploits1References2
CVE
CVE
•added 2021/08/11 8:21 p.m.•67 views

CVE-2020-25563

SapphireIMS 5.0 is affected by an authentication-bypass vulnerability in the RemoteMgmtTaskSave (Automation Tasks) path that allows an unauthenticated user to create a local administrator on any client by accessing RemoteMgmtTaskSave without a JSESSIONID. Root cause: direct access to an automatio...

9.8CVSS9.1AI score0.0156EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•4 views

PT-2021-11151

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0 Description: The issue allows an attacker to create a local administrator on any client using the credentials of a non-privileged user. This is achieved by directly accessing the RemoteMgmtTaskSave feature, which is pa...

8.8CVSS0.01247EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•11 views

PT-2021-11150

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0 Description: The issue allows creating a local administrator on any client without requiring credentials by directly accessing the RemoteMgmtTaskSave feature, which is part of Automation Tasks, and not having a...

9.8CVSS0.0156EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•9 views

CVE-2020-25563: Missing Authentication for Critical Function

In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...

9.8CVSS5.8AI score0.0156EPSS
SaveExploits1References2
seebug.org
seebug.org
•added 2014/03/21 12:00 a.m.•67 views

Siemens SIMATIC S7-1200多个漏洞

CVE ID: CVE-2014-2249,CVE-2014-2250,CVE-2014-2252,CVE-2014-2254,CVE-2014-2256,CVE-2014-2258 SIMATIC S7-1200是可编程控制器,可实现简单却高度精确的自动化任务。 Siemens SIMATIC S7-1200 4.0.0之前版本在实现上存在多个漏洞,可被恶意利用执行跨站请求伪造、劫持用户会话、造成拒绝服务。 1、向TCP端口443发送特制的数据包造成的错误可造成设备进入defect模式。 2、随机生成器内弱熵相关错误,可导致劫持另外用户的会话。...

8.3CVSS6.4AI score0.04731EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•38 views

Fedora Update for php-Smarty FEDORA-2008-9401

Check for the Version of php-Smarty OpenVAS Vulnerability Test Fedora Update for php-Smarty FEDORA-2008-9401 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

7.5CVSS7.5AI score0.01644EPSS
SaveExploits0References2
Rows per page
Query Builder