Lucene search
+L

553 matches found

NVD
NVD
added 2021/01/15 6:15 p.m.37 views

CVE-2021-0204

A sensitive information disclosure vulnerability in delta-export configuration utility dexp of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp utility, including password hashes of local users. Since dexp i...

7.8CVSS7.2AI score0.00303EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/01/13 12:00 a.m.9 views

PT-2021-2118 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S8 Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D230 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S9 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S12,...

7.8CVSS7.1AI score0.00303EPSS
SaveExploits0References5
OSV
OSV
added 2020/12/24 4:15 p.m.7 views

CVE-2020-27719

On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...

6.1CVSS6.3AI score0.00757EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/24 4:15 p.m.36 views

CVE-2020-27719

On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...

6.1CVSS6AI score0.00757EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/24 4:15 p.m.23 views

Cross site scripting

On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...

4.3CVSS6AI score0.00757EPSS
SaveExploits0References1Affected Software14
Tenable Nessus
Tenable Nessus
added 2020/12/17 12:00 a.m.27 views

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K25691186)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.3.1 / 15.1.1 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K25691186 advisory. - On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via...

7.8CVSS7.4AI score0.0105EPSS
SaveExploits0References2
Citrix
Citrix
added 2020/11/09 12:00 a.m.8 views

Citrix Workspace app (earlier known as Citrix Receiver) for Chrome and HTML5 Configuration Utility

How to use Configuration Utility Steps to Create a Configuration: 1. Click Create New 2. Select the appropriate Citrix Workspace app from the following options: Citrix Workspace app for Chrome Citrix Workspace app for HTML5 If you need configuration for Citrix Receiver, choose the corresponding...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2020/11/05 8:15 p.m.4 views

CVE-2020-5940

In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the BIG-IP Configuration utility...

5.4CVSS5.3AI score0.00521EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/11/03 12:00 a.m.34 views

F5 Networks BIG-IP : BIG-IP TMUI vulnerability (K43310520)

A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the BIG-IP Configuration utility. CVE-2020-5940 Impact An authenticated attacker may be able to store JavaScript, whichis executed when another...

5.4CVSS5.5AI score0.00521EPSS
SaveExploits0References2
NVD
NVD
added 2020/10/29 4:15 p.m.28 views

CVE-2020-5932

On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting XSS vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed wh...

4.8CVSS4.9AI score0.00517EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/10/29 4:15 p.m.4 views

CVE-2020-5932

On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting XSS vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed wh...

4.8CVSS4.9AI score0.00517EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/26 4:15 p.m.7 views

CVE-2020-5927

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting...

6.1CVSS6.4AI score0.00766EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/08/26 4:15 p.m.5 views

CVE-2020-5927

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting...

6.1CVSS6.1AI score0.00766EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/08/26 4:15 p.m.7 views

CVE-2020-5928

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, BIG-IP ASM Configuration utility CSRF protection token can be reused multiple times...

3.3CVSS4.6AI score0.00182EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/08/26 3:15 p.m.6 views

CVE-2020-5920

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack...

4.3CVSS5.4AI score0.00859EPSS
SaveExploits0References2
CVE
CVE
added 2020/08/26 3:14 p.m.57 views

CVE-2020-5927

The CVE-2020-5927 vulnerability affects F5 BIG-IP ASM Configuration utility across multiple versions: 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, with a Stored-Cross Site Scripting flaw. The issue is documented in the K55873574 advisory; affected release tables show vulnerable BIG-IP A...

6.1CVSS6.2AI score0.00766EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/08/26 2:50 p.m.53 views

CVE-2020-5920

CVE-2020-5920 affects BIG-IP AFM Configuration utility. The vulnerability is a read-only blind SQL injection that authenticated BIG-IP users can exploit to enumerate table names and user accounts. Affected versions are 15.0.0–15.1.0.5, 14.1.0–14.1.2.7, 13.1.0–13.1.3.4, 12.1.0–12.1.5.1, and 11.6.1...

4.3CVSS5.1AI score0.00859EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/08/26 12:00 a.m.28 views

F5 Networks BIG-IP : BIG-IP ASM Configuration utility vulnerability (K40843345)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.2 / 13.1.3.5 / 14.1.2.7 / 15.0.1.4 / 15.1.0.5 / 16.0.0 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K40843345 advisory. - In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6...

3.3CVSS5.1AI score0.00182EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/08/26 12:00 a.m.30 views

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K29923912)

The Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory. CVE-2020-5916 Impact Requests to the Configuration utilitycan result in arbitrary file reads outside of the web root directory. C Tenable Network Security, Inc...

6.8CVSS6.8AI score0.00533EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2020/07/08 4:22 p.m.81 views

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

CVE-2020-5902 Summary In BIG-IP versions 15.0.0-15.1.0.3,...

10CVSS8.2AI score0.99999EPSS
SaveExploits62
Rows per page
Query Builder