Lucene search
+L

9862 matches found

Talos
Talos
•added 2022/10/27 12:00 a.m.•61 views

InHand Networks InRouter302 console verify leftover debug code vulnerability

Talos Vulnerability Report TALOS-2022-1520 InHand Networks InRouter302 console verify leftover debug code vulnerability October 27, 2022 CVE Number CVE-2022-26023 SUMMARY A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A...

6.5CVSS6.8AI score0.00801EPSS
SaveExploits1
Talos
Talos
•added 2022/10/27 12:00 a.m.•58 views

InHand Networks InRouter302 console support leftover debug code vulnerability

Talos Vulnerability Report TALOS-2022-1521 InHand Networks InRouter302 console support leftover debug code vulnerability October 27, 2022 CVE Number CVE-2022-28689 SUMMARY A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. A...

8.8CVSS7AI score0.00953EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/10/27 12:00 a.m.•12 views

InHand Networks InRouter302 安全漏洞

The InHand Networks InRouter302 is an LTE cellular router from InHand Networks, Inc. A security vulnerability exists in the InHand Networks InRouter302 version V3.5.45, which stems from a remaining debug code vulnerability in the console nvram function...

6.5CVSS6.1AI score0.00794EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•13 views

The vulnerability in the Crash Report component of the sigsegvHandler function in the debug.c file of the Redis database management system allows a attacker to cause a service failure.

The vulnerability of the Crash Report component of the sigsegvHandler function in the debug.c file of the Redis database management system is related to improper cleanup or release of resources. Exploiting this vulnerability may allow an attacker to cause a service failure...

7.8CVSS5.7AI score0.00607EPSS
SaveExploits1References6Affected Software6
OSV
OSV
•added 2022/10/25 9:15 p.m.•12 views

CVE-2022-28170

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

6.5CVSS7.1AI score0.00213EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/25 9:15 p.m.•35 views

CVE-2022-28170

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

6.5CVSS0.00213EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/25 9:15 p.m.•28 views

Design/Logic Flaw

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

1.7CVSS6.2AI score0.00213EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/10/25 7:15 p.m.•35 views

CVE-2022-27912

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests...

5.3CVSS6.8AI score
SaveExploits0References1
Prion
Prion
•added 2022/10/25 7:15 p.m.•16 views

Design/Logic Flaw

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests...

5CVSS5.2AI score0.00535EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/10/25 7:00 p.m.•105 views

CVE-2022-27912

CVE-2022-27912 affects Joomla! 4.0.0–4.2.3; publicly enabled debug mode leaks data from previous requests (BIT-JOOMLA notes it may include full request payloads, including passwords). Mitigation: disable public debug mode and upgrade to Joomla! 4.2.4 or later.

5.3CVSS5.4AI score0.00535EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/25 7:00 p.m.•46 views

CVE-2022-27912 [20221001] - Core - Debug Mode leaks full request payloads including passwords

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests...

5.8AI score0.00535EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/10/25 6:00 p.m.•11 views

CVE-2022-27912

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests...

5.3CVSS6.1AI score0.00535EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/10/25 5:15 p.m.•12 views

CVE-2022-33757

An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance...

6.5CVSS5.8AI score0.00835EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/25 5:15 p.m.•32 views

CVE-2022-33757

An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance...

6.5CVSS0.00835EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/25 5:15 p.m.•35 views

Design/Logic Flaw

An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance...

4CVSS6.1AI score0.00835EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/10/25 12:00 a.m.•11 views

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A security vulnerability exists in Nessus. An attacker can exploit this vulnerability to read Nessus debug log file attachments from the web UI without proper privileges...

6.5CVSS7.1AI score0.00835EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/25 12:00 a.m.•1 views

CVE-2022-27912: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests...

5.3CVSS6AI score0.00535EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/25 12:00 a.m.•3 views

CVE-2022-28170: Insecure Storage of Sensitive Information

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

6.5CVSS6.7AI score0.00213EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/25 12:00 a.m.•9 views

PT-2022-18687 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 4.0.0 through 4.2.3 Description: An issue was discovered in Joomla! where sites with publicly enabled debug mode exposed data of previous requests. Recommendations: For Joomla! versions 4.0.0 through 4.2.3, disable the public...

5.3CVSS6.8AI score0.00535EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2022/10/25 12:00 a.m.•51 views

CVE-2022-28170

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

6.5AI score0.00213EPSS
SaveExploits0References2
Rows per page
Query Builder