Lucene search
+L

3336 matches found

Prion
Prion
•added 2022/10/20 3:15 p.m.•29 views

Hardcoded credentials

In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access...

4.3CVSS7.5AI score0.00338EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
•added 2022/10/20 12:00 a.m.•20 views

PCTechSoft PCSecure 信任管理问题漏洞

PCTechSoft PCSecure is a personal computer security software from PCTechSoft. A security vulnerability exists in PCTechSoft PCSecure version V5.0.8.xw that stems from the use of hard-coded credentials in configuration files...

7.8CVSS7.3AI score0.00338EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/20 12:00 a.m.•7 views

CVE-2022-42176: Use of Hard-coded Credentials

In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access...

7.8CVSS7.3AI score0.00338EPSS
SaveExploits2References3
OSV
OSV
•added 2022/10/13 11:15 a.m.•17 views

CVE-2021-20030

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files...

7.5CVSS5.8AI score0.00962EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/13 11:15 a.m.•22 views

Design/Logic Flaw

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files...

5CVSS7.7AI score0.00962EPSS
SaveExploits0References1Affected Software1
SonicWall
SonicWall
•added 2022/10/13 9:40 a.m.•58 views

GMS File Path Manipulation

An unauthenticated attacker can gain access to web directory containing application's binaries and configuration files through file path manipulation vulnerability. CVE: CVE-2021-20030 Last updated: Oct. 13, 2022, 9:40 a.m...

7.5CVSS7.1AI score0.00962EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2022/10/13 12:00 a.m.•11 views

CVE-2021-20030

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files...

7.7AI score0.00962EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/10/13 12:00 a.m.•19 views

SonicWALL Global Management System 路径遍历漏洞

The SonicWALL Global Management System GMS is a global management system from SonicWALL USA. The system enables rapid deployment and centralized management of Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. A security vulnerability exists in the...

7.5CVSS7.4AI score0.00962EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/13 12:00 a.m.•17 views

PT-2022-9165 · Sonicwall · Sonicwall Gms

Name of the Vulnerable Software and Affected Versions: SonicWall GMS affected versions not specified Description: The issue allows an unauthenticated attacker to gain access to the web directory containing the application's binaries and configuration files through file path manipulation...

7.5CVSS7.6AI score0.00962EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/10/12 12:00 a.m.•19 views

PT-2022-6707 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S1-EVO Juniper Networks Junos OS Evolved version 21.1-EVO Juniper Networks Junos OS Evolved versions prior to 21.2R3-EVO Juniper Networks Junos OS Evolved versions prior to 21.3R2-EVO...

7.3CVSS7.2AI score0.00189EPSS
SaveExploits0References4
Veracode
Veracode
•added 2022/10/11 1:16 p.m.•32 views

Information Disclosure

fwupd is vulnerable to information disclosure. The vulnerability exists when creating an OPERATOR user account on the BMC, allowing an attacker to read the the configuration files on the system...

6.5CVSS5.8AI score0.00821EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/09/16 2:15 a.m.•15 views

CVE-2022-34002

The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability which allows an low-privileged authenticated attacker to leak the configuration files and source code of the web application...

6.5CVSS5.8AI score0.01132EPSS
SaveExploits1References2
NVD
NVD
•added 2022/09/16 2:15 a.m.•27 views

CVE-2022-34002

The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability which allows an low-privileged authenticated attacker to leak the configuration files and source code of the web application...

6.5CVSS0.01132EPSS
SaveExploits1References2
Prion
Prion
•added 2022/09/16 2:15 a.m.•34 views

Design/Logic Flaw

The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability which allows an low-privileged authenticated attacker to leak the configuration files and source code of the web application...

4CVSS6.4AI score0.01132EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/09/16 1:55 a.m.•37 views

CVE-2022-34002

The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability which allows an low-privileged authenticated attacker to leak the configuration files and source code of the web application...

6.6AI score0.01132EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•21 views

Web Port 授权问题漏洞

Web Port is a web-based SCADA data acquisition and monitoring system and HMI human machine interface system. A security vulnerability exists in Cynet 360 Web Portal versions prior to v4.5, which stems from a vulnerability that allows an attacker to access a list of excluded files and configuratio...

5.3CVSS5.8AI score0.0071EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•23 views

Web Port 授权问题漏洞

Web Port is a web-based SCADA data acquisition and monitoring system and HMI human machine interface system. A security vulnerability exists in Cynet 360 Web Portal versions prior to v4.5, which stems from a vulnerability that allows an attacker to access a list of excluded files and configuratio...

5.3CVSS5.8AI score0.0071EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•20 views

Web Port 授权问题漏洞

Web Port is a web-based SCADA data acquisition and monitoring system and HMI human machine interface system. A security vulnerability exists in Cynet 360 Web Portal versions prior to v4.5, which stems from a vulnerability that allows an attacker to access a list of excluded files and configuratio...

5.3CVSS5.8AI score0.0071EPSS
SaveExploits1References3
OSV
OSV
•added 2022/08/16 9:15 p.m.•13 views

CVE-2020-14379

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure...

5.6CVSS5.7AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/16 9:15 p.m.•46 views

CVE-2020-14379

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure...

5.6CVSS0.00221EPSS
SaveExploits0References1
Rows per page
Query Builder