Lucene search
+L

254 matches found

Cvelist
Cvelist
•added 2021/10/27 2:25 p.m.•51 views

CVE-2021-38379

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...

5.7AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/10/27 12:00 a.m.•15 views

Northern.tech CFEngine 信任管理问题漏洞

Northern.tech CfEngine is an open source configuration management solution from Northern.tech, Inc. It is used to securely manage It infrastructure. A security vulnerability exists in Northern.tech CFEngine Enterprise versions 3.15.0 through 3.15.4 that stems from the program's lack of SSL...

6.5CVSS6AI score0.00417EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/27 12:00 a.m.•1 views

CVE-2021-38379: Incorrect Default Permissions

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure...

5.5CVSS5.7AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/10/27 12:00 a.m.•15 views

Northern.tech CfEngine 信息泄露漏洞

Northern.tech CfEngine is an open source configuration management solution from Northern.tech, Inc. It is used to securely manage It infrastructure. An information disclosure vulnerability exists in Northern.tech CFEngine Enterprise that stems from the Hub in CFEngine Enterprise 3.6.7 through...

6.5CVSS6AI score0.00417EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/27 12:00 a.m.•4 views

CVE-2021-36756: Improper Certificate Validation

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation...

6.5CVSS5.7AI score0.00417EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/16 7:15 p.m.•21 views

CVE-2019-19394

Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...

6.1CVSS6.8AI score
SaveExploits0References1
NVD
NVD
•added 2020/04/16 7:15 p.m.•24 views

CVE-2019-19394

Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...

6.1CVSS6.2AI score0.00641EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/16 7:15 p.m.•23 views

Code injection

Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...

4.3CVSS6.2AI score0.00641EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/16 5:48 p.m.•34 views

CVE-2019-19394

Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...

6.2AI score0.00641EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/16 5:48 p.m.•62 views

CVE-2019-19394

CVE-2019-19394 affects Northern.tech CFEngine Enterprise prior to version 3.10.7, and the 3.11.x and 3.12.x branches prior to 3.12.3, as well as 3.13.x and 3.14.x branches. The vulnerability is an XSS issue in the CFEngine Enterprise product. The applicable fixes are in CFEngine Enterprise releas...

6.1CVSS6.1AI score0.00641EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/16 12:00 a.m.•2 views

CVE-2019-19394: Improper Neutralization of Input During Web Page Generation

Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...

6.1CVSS6.4AI score0.00641EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/06/06 5:29 p.m.•39 views

CVE-2019-9929

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...

9CVSS7.7AI score0.01985EPSS
SaveExploits1References3
Prion
Prion
•added 2019/06/06 5:29 p.m.•25 views

Code injection

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...

9CVSS8.7AI score0.01985EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2019/06/06 5:29 p.m.•18 views

CVE-2019-9929

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...

8.8CVSS7.7AI score0.01985EPSS
SaveExploits1References2
CVE
CVE
•added 2019/06/06 4:54 p.m.•148 views

CVE-2019-9929

CVE-2019-9929 concerns Northern.tech CFEngine Enterprise 3.12.1 with insecure permissions. The connected sources consistently describe the issue as an insecure-permissions vulnerability for CFEngine Enterprise 3.12.1. The available documentation does not specify the exact vulnerable file, compone...

9CVSS7.7AI score0.01985EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2019/06/06 4:54 p.m.•52 views

CVE-2019-9929

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...

9CVSS7.7AI score0.01985EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2019/06/06 4:54 p.m.•85 views

CVE-2019-9929

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...

9CVSS7.7AI score0.01985EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/06 12:00 a.m.•6 views

CVE-2019-9929: Insertion of Sensitive Information into Log File

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...

9CVSS7.7AI score0.01985EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:00 a.m.•14 views

Vulnerabilities of the Debian GNU/Linux operating system that allow a local malicious individual to compromise the integrity of protected information

The cfengine-doc package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited by local malicious individuals...

2.1CVSS5.5AI score0.00428EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:00 a.m.•13 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the cfengine package up to version 2.1.7 inclusive of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

10CVSS5.4AI score0.19508EPSS
SaveExploits4References4Affected Software1
Rows per page
Query Builder