Lucene search
K

256 matches found

Prion
Prion
added 2022/06/15 5:15 p.m.15 views

Default credentials

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

2.1CVSS5AI score0.00378EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/06/15 4:9 p.m.82 views

CVE-2022-1342

CVE-2022-1342 affects Devolutions Remote Desktop Manager (pre- and including 2022.1.24). The root cause is a lack of password masking and a caching issue that can leave sensitive fields visible when panels are closed and reopened, enabling physically proximate attackers to observe data. The conne...

4.6CVSS4.8AI score0.00378EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/15 4:9 p.m.24 views

CVE-2022-1342

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

5.2AI score0.00378EPSS
Exploits0References1
OSV
OSV
added 2021/10/18 2:15 p.m.4 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS7.3AI score0.01603EPSS
Exploits0References2
NVD
NVD
added 2021/10/18 2:15 p.m.9 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS0.01603EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/10/18 1:22 p.m.17 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

9AI score0.01603EPSS
Exploits0References2
CVE
CVE
added 2021/10/18 1:22 p.m.239 views

CVE-2021-42098

CVE-2021-42098 affects Devolutions Remote Desktop Manager; there is an incomplete permission check on entries prior to version 2021.2.16, allowing permission bypass via batch custom PowerShell. The available connected documents indicate the issue stems from improper access control rather than a v...

8.8CVSS8.7AI score0.01603EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2021/04/02 12:0 a.m.6 views

Devolutions Remote Desktop Manager Cross-Site Scripting Vulnerability

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in webviews in Devolutions Remote Desktop Manager versions prior to...

5.4CVSS6.2AI score0.01149EPSS
Exploits0References1
NVD
NVD
added 2021/04/01 10:15 p.m.18 views

CVE-2021-23922

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting XSS vulnerability in webviews...

5.4CVSS0.01149EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/04/01 9:53 p.m.17 views

CVE-2021-23922

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting XSS vulnerability in webviews...

5.6AI score0.01149EPSS
Exploits0References1
NVD
NVD
added 2021/04/01 9:15 p.m.10 views

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

5.4CVSS0.01075EPSS
Exploits0References1
Prion
Prion
added 2021/04/01 9:15 p.m.12 views

Cross site scripting

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

3.5CVSS5AI score0.01075EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/01 8:1 p.m.14 views

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

5.3AI score0.01075EPSS
Exploits0References1
CVE
CVE
added 2021/04/01 8:1 p.m.72 views

CVE-2021-28047

CVE-2021-28047 affects Devolutions Remote Desktop Manager. The vulnerability is a Cross-Site Scripting (XSS) in Administration Reports present in versions prior to 2021.1, exploitable by a remote authenticated user who can inject arbitrary web script or HTML via multiple input fields. The connect...

5.4CVSS5.1AI score0.01075EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.3 views

Devolutions Remote Desktop Manager 跨站脚本漏洞

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in webviews in Devolutions Remote Desktop Manager versions prior to...

5.4CVSS5.3AI score0.01149EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.6 views

Devolutions Remote Desktop Manager 跨站脚本漏洞

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in the Administration Report in Devolutions Remote Desktop Manager...

5.4CVSS5.5AI score0.01075EPSS
Exploits0References2
Rows per page
Query Builder