Lucene search
K

1047 matches found

CNVD
CNVD
added 2018/07/09 12:0 a.m.2 views

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2018-13466)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WAS that stems from t...

6.7CVSS5.7AI score0.00265EPSS
Exploits0References1
OSV
OSV
added 2018/06/27 4:29 p.m.2 views

CVE-2018-5436

The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Softwa...

8.8CVSS5.7AI score0.01007EPSS
Exploits0References2
Prion
Prion
added 2018/06/27 4:29 p.m.21 views

Design/Logic Flaw

The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Softwa...

4CVSS8.7AI score0.01007EPSS
Exploits0References2Affected Software2
NVD
NVD
added 2018/06/27 4:29 p.m.15 views

CVE-2018-5436

The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Softwa...

8.8CVSS7.3AI score0.01007EPSS
Exploits0References2
Circl
Circl
added 2018/05/29 3:50 p.m.14 views

CVE-2004-1389

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/veritasnetbackupcmdexec.rb 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:08+00:00| seen...

6CVSS5.6AI score0.09863EPSS
Exploits6References1
Circl
Circl
added 2018/05/29 3:50 p.m.11 views

CVE-2015-3760

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/dyldprinttofileroot.rb 2019-03-13 07:34:18+00:00| exploited| https://t.me/informationsecuritychannel/25462 2025-02-06 03:13:42+00:00|...

7.2CVSS7.7AI score0.01751EPSS
Exploits2References2
CNVD
CNVD
added 2018/05/21 12:0 a.m.1 views

Jaspersoft JasperReports Information Disclosure Vulnerability

JasperReports is a report generation tool that displays rich page content and converts it to PDF, HTML, or XML format. An information disclosure vulnerability exists in Jaspersoft JasperReports. A remote attacker can exploit this vulnerability to retrieve stored data source passwords, leading to...

6.5CVSS6.5AI score0.01039EPSS
Exploits2References1
OSV
OSV
added 2018/04/04 7:29 a.m.1 views

UBUNTU-CVE-2018-9258

In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources...

7.5CVSS6.7AI score0.01975EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2017/11/07 9:19 a.m.26 views

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.5CVSS3.9AI score0.01039EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2017/11/01 12:0 a.m.10 views

PT-2019-3785 · Fasterxml +7 · Jackson-Databind +7

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions prior to 2.9.10 FasterXML jackson-databind version 2.8.11.5 FasterXML jackson-databind version 2.6.7.3 Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind. It is related to...

10CVSS7.3AI score0.45205EPSS
Exploits31References401
Positive Technologies
Positive Technologies
added 2017/11/01 12:0 a.m.10 views

PT-2019-4183 · Jackson +6 · Jackson-Databind +6

Name of the Vulnerable Software and Affected Versions: jackson-databind versions 2.0.0 through 2.9.10 jackson-databind versions prior to 2.9.10.1 jackson-databind versions prior to 2.8.11.5 jackson-databind versions prior to 2.6.7.3 Description: A Polymorphic Typing issue was discovered in the...

10CVSS7.4AI score0.45205EPSS
Exploits31References389
Tenable Nessus
Tenable Nessus
added 2017/10/23 12:0 a.m.20 views

openSUSE Security Update : cacti and cacti-spine (openSUSE-2017-1173)

This update for cacti and cacti-spine fixes the following issues : Build version 1.1.26 - issue841: --input-fields variable not working with addgraphs.php cli - issue986: Resolve minor appearance problem on Modern theme - issue989: Resolve issue with data input method commands loosing spaces on...

6.1CVSS7.1AI score0.0107EPSS
Exploits1References2
Circl
Circl
added 2017/10/16 10:16 a.m.8 views

CVE-2017-13088

creationtimestamp| type| source ---|---|--- 2017-10-16 10:16:35+00:00| exploited| https://t.me/bykvaadm/327 2017-10-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=233 2017-10-27 23:29:14+00:00| exploited| https://t.me/SHATOOB/2227 2018-12-19 08:18:08+00:00| seen|...

5.3CVSS6.8AI score0.01807EPSS
Exploits0References7
OSV
OSV
added 2017/10/02 1:29 a.m.1 views

UBUNTU-CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.5CVSS6.7AI score0.01039EPSS
Exploits2References3
OSV
OSV
added 2017/10/02 1:29 a.m.2 views

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.5CVSS5.9AI score0.01039EPSS
Exploits2References1
Prion
Prion
added 2017/10/02 1:29 a.m.14 views

Design/Logic Flaw

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

4CVSS6.2AI score0.01039EPSS
Exploits2References1Affected Software1
UbuntuCve
UbuntuCve
added 2017/10/02 1:29 a.m.20 views

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.5CVSS6.7AI score0.01039EPSS
Exploits2References2
NVD
NVD
added 2017/10/02 1:29 a.m.28 views

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.5CVSS6.3AI score0.01039EPSS
Exploits2References1
0day.today
0day.today
added 2017/10/02 12:0 a.m.65 views

JasperSoft JasperReports 4.7 Password Disclosure Vulnerability

Exploit for php platform in category web applications + Credits: Joshua Platz aka Binary1985 + CVE ID: CVE-2017-14941 + Website: https://github.com/binary1985 + Source:...

4CVSS6.5AI score0.01039EPSS
Exploits2
Cvelist
Cvelist
added 2017/10/01 3:0 a.m.28 views

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.3AI score0.01039EPSS
Exploits2References1
Rows per page
Query Builder