Lucene search
+L

2806 matches found

OSV
OSV
•added 2024/02/14 5:15 p.m.•17 views

CVE-2024-23805

Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...

7.5CVSS5.8AI score0.00515EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/14 5:15 p.m.•60 views

CVE-2024-23805

Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...

7.5CVSS7.4AI score0.00515EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/14 5:15 p.m.•43 views

Default configuration

Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...

5CVSS6.8AI score0.00515EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/14 4:30 p.m.•16 views

CVE-2024-23805 F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability

Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...

7.5CVSS7.4AI score0.00515EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/14 4:30 p.m.•99 views

CVE-2024-23805

Summary (CVE-2024-23805) : This vulnerability affects F5 BIG-IP products, notably the Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM. It arises when an HTTP Analytics profile with URLs enabled is configured on a virtual server and the database variables avr.IncludeServerI...

7.5CVSS7.5AI score0.00515EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/14 4:30 p.m.•61 views

CVE-2024-23805 F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability

Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...

7.5CVSS7.6AI score0.00515EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2024/02/14 1:55 p.m.•56 views

K000137334: F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability CVE-2024-23805

Security Advisory Description Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and th...

7.5CVSS7.6AI score0.00515EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
•added 2024/02/14 12:00 a.m.•32 views

F5 Networks BIG-IP : F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability (K000137334)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000137334 advisory. - Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application...

7.5CVSS7.4AI score0.00515EPSS
SaveExploits0References2
HackRead
HackRead
•added 2024/02/08 10:54 a.m.•15 views

The Anatomy of Trading Bot Scams: Strategies for Secure Investments

By Uzair Amir In the exciting world of investment, there are malicious actors who peddle trading bot scams, preying on the aspirations of eager investors. This is a post from HackRead.com Read the original post: The Anatomy of Trading Bot Scams: Strategies for Secure Investments...

7.3AI score
SaveExploits0
WPVulnDB
WPVulnDB
•added 2024/02/06 12:00 a.m.•16 views

Shield Security – Smart Bot Blocking & Intrusion Prevention Security < 18.5.10 - Unauthenticated Local File Inclusion

Description The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and...

7.5CVSS7.3AI score0.56567EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/02/05 10:15 p.m.•43 views

CVE-2023-6989

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP...

9.8CVSS9.6AI score0.56567EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/02/05 9:21 p.m.•131 views

CVE-2023-6989 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP...

9.8CVSS9.8AI score0.56567EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•2 views

CVE-2023-6989: Improper Control of Filename for Include/Require Statement in PHP Program

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP...

9.8CVSS5.9AI score0.56567EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/31 6:15 p.m.•12 views

CVE-2024-22163

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shield Security Shield Security – Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security – Smart Bot Blocking & Intrusion Prevention Security: from...

6.1CVSS6.8AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/31 6:15 p.m.•37 views

CVE-2024-22163

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shield Security Shield Security – Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security – Smart Bot Blocking & Intrusion Prevention Security: from...

7.1CVSS6.9AI score0.00331EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/31 6:15 p.m.•32 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shield Security Shield Security – Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security – Smart Bot Blocking & Intrusion Prevention Security: from...

5.8CVSS6.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/01/31 5:57 p.m.•57 views

CVE-2024-22163 WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shield Security Shield Security – Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security – Smart Bot Blocking & Intrusion Prevention Security: from...

7.1CVSS7AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/31 5:57 p.m.•81 views

CVE-2024-22163

CVE-2024-22163 is a stored XSS vulnerability in the WordPress Shield Security plugin (Shield Security – Smart Bot Blocking & Intrusion Prevention Security)

7.1CVSS7.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
•added 2024/01/31 12:21 p.m.•48 views

Telegram Marketplaces Fuel Phishing Attacks with Easy-to-Use Kits and Malware

Cybersecurity researchers are calling attention to the "democratization" of the phishing ecosystem owing to the emergence of Telegram as an epicenter for cybercrime, enabling threat actors to mount a mass attack for as little as $230. "This messaging app has transformed into a bustling hub where...

6.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•4 views

CVE-2024-22163: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shield Security Shield Security – Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security – Smart Bot Blocking & Intrusion Prevention Security: from...

7.1CVSS5.8AI score0.00331EPSS
SaveExploits0References3
Rows per page
Query Builder