Lucene search
+L

216 matches found

Kitploit
Kitploit
added 2022/12/16 11:30 a.m.65 views

AzureHound - Azure Data Exporter For BloodHound

The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and can be...

7.2AI score
SaveExploits0References3
CNVD
CNVD
added 2022/05/23 12:0 a.m.64 views

Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability (CNVD-2022-64196)

Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices. Information...

6.1CVSS2.4AI score0.007EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/23 12:0 a.m.45 views

Cisco Common Services Platform Collector跨站脚本漏洞(CNVD-2022-50665)

Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices.Cisco Common Services Platform Collecto...

6.1CVSS2.7AI score0.007EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/05/19 12:0 a.m.14 views

Cisco Common Services Platform Collector 跨站脚本漏洞

Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices. Information...

6.1CVSS6.2AI score0.007EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/05/19 12:0 a.m.11 views

Cisco Common Services Platform Collector 跨站脚本漏洞

Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices.Cisco Common Services Platform Collecto...

6.1CVSS6.4AI score0.007EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/05/19 12:0 a.m.29 views

Cisco Common Services Platform Collector 跨站脚本漏洞

Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices.Cisco Common Services Platform Collecto...

6.1CVSS6.4AI score0.007EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/11 6:15 p.m.27 views

CVE-2021-22805

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...

9.1CVSS0.0085EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.5 views

CVE-2021-22804

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages. Affected Product: Interactive Graphica...

7.5CVSS5.9AI score0.01294EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/11 6:15 p.m.18 views

CVE-2021-22823

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21320...

9.1CVSS0.21388EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.6 views

CVE-2021-22805

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...

9.1CVSS5.9AI score0.0085EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/11 6:15 p.m.22 views

CVE-2021-22804

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages. Affected Product: Interactive Graphica...

7.5CVSS0.01294EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/11 6:15 p.m.26 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.5CVSS0.14241EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.7 views

CVE-2021-22823

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21320...

9.1CVSS5.9AI score0.21388EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.8 views

CVE-2021-22802

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.ex...

9.8CVSS6.4AI score0.20165EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.4 views

CVE-2021-22803

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product:...

9.8CVSS6.4AI score0.01943EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.5 views

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

7.5CVSS5.8AI score0.14241EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/11 6:15 p.m.15 views

Design/Logic Flaw

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

5CVSS7.4AI score0.14241EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/02/11 6:15 p.m.15 views

Design/Logic Flaw

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product:...

7.5CVSS9.6AI score0.01943EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/02/11 6:15 p.m.18 views

Remote code execution

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.ex...

7.5CVSS9.6AI score0.20165EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/02/11 6:15 p.m.19 views

Design/Logic Flaw

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages. Affected Product: Interactive Graphica...

5CVSS7.4AI score0.01294EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder