Lucene search
+L

699 matches found

Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.16 views

RHEL 6 : libdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdb: Reads DBCONFIG from the current working directory CVE-2017-10140 - Vulnerability in the Data Store...

5.1AI score0.00604EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.14 views

RHEL 5 : libdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdb: Reads DBCONFIG from the current working directory CVE-2017-10140 - Vulnerability in the Data Store...

6AI score0.00604EPSS
SaveExploits1References2
OSV
OSV
added 2024/05/06 4:15 p.m.8 views

CVE-2024-34089

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...

5.4CVSS5.8AI score0.00461EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/06 4:15 p.m.17 views

CVE-2024-34091

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...

7.3CVSS6.5AI score0.00505EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/06 4:15 p.m.9 views

CVE-2024-34091

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...

5.4CVSS5.8AI score0.00505EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/05/06 10:30 a.m.27 views

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to ETCD logs Information disclosure vulnerabilitiy.(CVE-2023-40694)

Summary Potential ETCD logs Information disclosure vulnerabilitiy CVE-2023-40694 has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-40694 DESCRIPTION: IBM Watson...

6.2CVSS6AI score0.00168EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/06 12:00 a.m.10 views

PT-2024-25699 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 2024.04 Archer Platform version 6.14.0.3 is a fixed release, implying versions prior to 6.14.0.3 are also vulnerable, but since 6.14.0.3 is mentioned as a fixed release and it is part of the versions prior to...

7.3CVSS5.6AI score0.00505EPSS
SaveExploits0References7
CVE
CVE
added 2024/05/06 12:00 a.m.63 views

CVE-2024-34089

CVE-2024-34089 concerns Archer Platform 6 prior to 2024.04 with a stored cross-site scripting (XSS) flaw. A remote authenticated Archer user can inject malicious HTML/JavaScript into a trusted application data store, which is then executed by victims’ browsers in the vulnerable app’s context. The...

7.3CVSS5.2AI score0.00461EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/06 12:00 a.m.13 views

CVE-2024-34089

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...

7.3CVSS5.3AI score0.00461EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/06 12:00 a.m.25 views

CVE-2024-34091

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...

7.3CVSS6.6AI score0.00505EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/06 12:00 a.m.31 views

CVE-2024-34089

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...

7.3CVSS6.6AI score0.00461EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/08 11:15 p.m.29 views

CVE-2024-23584

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

6.6CVSS6.4AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/08 11:05 p.m.90 views

CVE-2024-23584

The CVE-2024-23584 entry concerns HCL BigFix Asset Discovery (Asset Discovery 109 and earlier) where the NMAP Importer service may expose data store credentials to users of the Windows Registry. Documented impact is credential exposure with a CVSS v3.1 base score of 6.6 (AV:N/AC:H/PR:H/UI:N/S:U/C...

6.6CVSS6.5AI score0.00278EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/08 11:05 p.m.37 views

CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

6.6CVSS6.7AI score0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/08 11:05 p.m.29 views

CVE-2024-23584 HCL BigFix Asset Discovery is affected by a security vulnerability

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry...

6.6CVSS7.1AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/02 3:15 a.m.19 views

CVE-2024-20851

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege...

5.5CVSS4.7AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/02 3:15 a.m.9 views

CVE-2024-20851

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege...

5.5CVSS5.9AI score0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/02 2:59 a.m.32 views

CVE-2024-20851

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege...

4.4CVSS5.1AI score0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/02 2:59 a.m.16 views

CVE-2024-20851

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege...

4.4CVSS6.8AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/02 2:59 a.m.69 views

CVE-2024-20851

CVE-2024-20851 describes an improper access-control vulnerability in Samsung Data Store prior to version 5.3.00.4 . The issue allows local attackers to launch arbitrary activities with the Samsung Data Store privilege due to inadequate access controls on the component/file/behavior identified in ...

5.5CVSS6.7AI score0.00135EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder