CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

123 matches found

Prion•added 2020/08/09 5:15 p.m.•15 views

Design/Logic Flaw

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...

5CVSS5.7AI score0.02698EPSS

SaveExploits1References5Affected Software1

OSV•added 2020/08/09 5:15 p.m.•5 views

UBUNTU-CVE-2020-16248

DISPUTED Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...

5.8CVSS5.8AI score

SaveExploits0References7

Cvelist•added 2020/08/09 4:16 p.m.•28 views

CVE-2020-16248

5.6AI score0.02698EPSS

SaveExploits1References5

AlpineLinux•added 2020/08/09 4:16 p.m.•77 views

CVE-2020-16248

5.8CVSS5.7AI score0.02698EPSS

SaveExploits1

Debian CVE•added 2020/08/09 4:16 p.m.•41 views

CVE-2020-16248

5.8CVSS5.6AI score0.02698EPSS

SaveExploits1

CVE•added 2020/08/09 4:16 p.m.•109 views

CVE-2020-16248

Prometheus Blackbox Exporter (versions up to 0.17.0) contains a server-side request forgery (SSRF) vulnerability in the /probe endpoint due to an unsanitized target parameter. Exploitation allows an attacker to craft a target value to trigger SSRF, potentially reaching internal assets. The nuclei...

5.8CVSS5.6AI score0.02698EPSS

SaveExploits1References5Affected Software1

Positive Technologies•added 2020/08/09 12:0 a.m.•10 views

PT-2020-14841 · Prometheus +2 · Prometheus Blackbox Exporter +2

Name of the Vulnerable Software and Affected Versions: Prometheus Blackbox Exporter versions through 0.17.0 Description: The issue allows for a Server-Side Request Forgery SSRF via the /probe endpoint with the target parameter. There is a discussion suggesting this could be seen as both intended...

5.8CVSS6.6AI score0.02698EPSS

SaveExploits1References18

Openbugbounty•added 2020/01/27 3:42 a.m.•7 views

blackbox-dvr.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1075703 Security Researcher geeknik Helped patch 8930 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting blackbox-dvr.ru website an...

0.2AI score

SaveExploits0

Kitploit•added 2019/08/01 1:8 p.m.•51 views

Slurp - S3 Bucket Enumerator

Blackbox/whitebox S3 bucket enumerator Overview Credit to all the vendor packages that made this tool possible. This is a security tool; it's meant for pen-testers and security professionals to perform audits of s3 buckets. Features Scan via domains; you can target a single domain or a list of...

7.4AI score

SaveExploits0References1

exploitpack•added 2019/05/03 12:0 a.m.•52 views

Crestron AMBarco wePresent WiPGExtron ShareLinkTeq AV ITSHARP PN-L703WAOptoma WPS-ProBlackbox HD WPSInFocus LiteShow - Remote Command Injection

Crestron AMBarco wePresent WiPGExtron ShareLinkTeq AV ITSHARP PN-L703WAOptoma WPS-ProBlackbox HD WPSInFocus LiteShow - Remote Command Injection Exploit Title: Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Date: 05/01/2019 Exploit Author: Jacob Baines Tested on:...

10CVSS9.9AI score0.98952EPSS

SaveExploits10

ThreatPost•added 2019/05/02 9:15 p.m.•178 views

Critical Flaws Found in Eight Wireless Presentation Systems

Multiple wireless presentation systems have critical vulnerabilities – including a remote command-injection glitch and an unauthenticated remote stack buffer overflow flaw. Wireless presentation systems allow users to display their content directly from their laptop no network cable necessary by...

10CVSS0.9AI score0.98952EPSS

SaveExploits21References15

Prion•added 2019/04/30 9:29 p.m.•25 views

Stack overflow

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

10CVSS9.7AI score0.06957EPSS

SaveExploits1References1Affected Software12

NVD•added 2019/04/30 9:29 p.m.•28 views

CVE-2019-3929

10CVSS10AI score0.98952EPSS

SaveExploits10References5

OSV•added 2019/04/30 9:29 p.m.•6 views

CVE-2019-3929

9.8CVSS7.4AI score0.98952EPSS

SaveExploits10References5

Prion•added 2019/04/30 9:29 p.m.•23 views

Command injection

10CVSS9.9AI score0.98952EPSS

SaveExploits10References4Affected Software12

NVD•added 2019/04/30 9:29 p.m.•35 views

CVE-2019-3930

10CVSS9.8AI score0.06957EPSS

SaveExploits1References1

CVE•added 2019/04/30 8:25 p.m.•67 views

CVE-2019-3930

CVE-2019-3930 affects Crestron AM-100/AM-101, Barco wePresent WiPG-1000P/ WiPG-1600W (pre-2.4.1.19), Extron ShareLink 200/250, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3/4. Root cause: stack buffer overflow in libAwgCgi.so PARSERtoCHAR. Vulnerability al...

10CVSS9.8AI score0.06957EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2019/04/30 8:25 p.m.•45 views

CVE-2019-3930

9.8AI score0.06957EPSS

SaveExploits1References1

Cvelist•added 2019/04/30 8:21 p.m.•52 views

CVE-2019-3929

10AI score0.98952EPSS

SaveExploits10References4

ATTACKERKB•added 2019/04/30 12:0 a.m.•42 views

CVE-2019-3929

10CVSS9.8AI score0.98952EPSS

SaveIn wildExploits10References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by