Lucene search
+L

22072 matches found

Cvelist
Cvelist
added 2024/12/09 9:38 p.m.52 views

CVE-2024-12174

An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server...

2.7CVSS0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 9:38 p.m.12 views

CVE-2024-12174

An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server...

2.7CVSS6.9AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 9:38 p.m.98 views

CVE-2024-12174

CVE-2024-12174 affects Tenable Security Center and is caused by improper certificate validation when Security Center sends emails via an SMTP server. The underlying issue allows an authenticated, privileged attacker to intercept email messages sent from Security Center using a rogue SMTP server. ...

2.7CVSS3.6AI score0.00177EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.8 views

PT-2024-17470 · Tenable · Tenable Security Center

Name of the Vulnerable Software and Affected Versions: Tenable Security Center affected versions not specified Description: An Improper Certificate Validation issue exists, allowing an authenticated, privileged attacker to intercept email messages sent from Security Center via a rogue SMTP server...

2.7CVSS6.4AI score0.00177EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.8 views

Tenable Security Center 安全漏洞

Tenable Security Center is a security center from Tenable USA. Tenable Security Center has a security vulnerability that originates from incorrect certificate validation. An authenticated, privileged attacker could use this vulnerability to intercept email sent from Security Center via a maliciou...

2.7CVSS4.5AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.9 views

Synology Router Manager 跨站脚本漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A cross-site scripting vulnerability exists in Synology Router Manager SRM versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the Network Center Polic...

5.9CVSS5.5AI score0.0026EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/12/09 12:00 a.m.16 views

CBL Mariner 2.0 Security Update: php (CVE-2024-8932)

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8932 advisory. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to...

9.8CVSS7.1AI score0.01284EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/06 5:15 p.m.23 views

CVE-2024-48863

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: License Center 1.9.43 and later...

9.8CVSS0.01043EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/06 5:15 p.m.8 views

CVE-2024-48863

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: License Center 1.9.43 and later...

9.8CVSS6.1AI score0.01043EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/06 4:36 p.m.36 views

CVE-2024-48863 License Center

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: License Center 1.9.43 and later...

7.7CVSS0.01043EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/06 4:36 p.m.21 views

CVE-2024-48863 License Center

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: License Center 1.9.43 and later...

7.7CVSS8.1AI score0.01043EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/06 4:36 p.m.65 views

CVE-2024-48863

The CVE-2024-48863 entry describes a command-injection vulnerability affecting QNAP License Center. The affected component is License Center, with remediation noted as a fix in License Center 1.9.43 and later. The provided connected documents confirm the issue is a remote-command execution risk, ...

9.8CVSS7.8AI score0.01043EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a attacker to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS...

6.4CVSS5.4AI score0.00389EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:00 a.m.15 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network management allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

6.4CVSS6AI score0.00429EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/12/06 12:00 a.m.9 views

Tenable Security Center < 6.5.0 Multiple Vulnerabilities (TNS-2024-19)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-19 advisory. - Security Center leverages third-party software to help provide underlying...

9.1CVSS7.2AI score0.66582EPSS
SaveExploits4References10
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a attacker to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS...

5.5CVSS5.4AI score0.00391EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a attacker to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS...

5.5CVSS5.4AI score0.00391EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a attacker to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS...

5.5CVSS5.4AI score0.00391EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:00 a.m.14 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a attacker to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS...

6.4CVSS5.4AI score0.00426EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.10 views

QNAP Systems License Center 安全漏洞

QNAP Systems License Center is a tool for monitoring and managing the licenses of applications running on local devices from China's Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems License Center version 1.9.43 and prior versions that stems from the inclusion of a...

9.8CVSS7.1AI score0.01043EPSS
SaveExploits0References1
Rows per page
Query Builder