6929 matches found
KB5006732: Windows Server 2012 Security Update (October 2021)
The remote Windows host is missing security update 5006732. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
KB5006674: Windows 11 Security Update (October 2021)
The remote Windows host is missing security update 5006674. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...
KB5006728: Windows 7 and Windows Server 2008 R2 Security Update (October 2021)
The remote Windows host is missing security update 5006728. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...
webTareas Cross-Site Request Forgery Vulnerability
webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas, which can be exploited by an attacker to create a new administrative profile, a...
Fortinet FortiWebManager Cross-Site Scripting Vulnerability
Fortinet FortiWebManager is a web application firewall from Fortinet, Inc. A cross-site scripting vulnerability exists in Fortinet FortiWebManager versions 6.2.3 and 6.0.2 and below, which stems from a lack of checksum filtering of user-supplied and output data, and can be exploited by attackers ...
Myucms Remote Code Execution Vulnerability
MyuCms is an intelligent customization system developed by ThinkPhp specifically for enterprises. myucms has a remote code execution vulnerability in version v2.2.1, which can be exploited by attackers to cause code execution...
Biqs It Biqs-drive Local File Inclusion Vulnerability
Biqs It Biqs-drive is an online driving school software from the Belgian company Biqs It. BIQS IT Biqs-drive v1.83 and below is vulnerable to a local file inclusion vulnerability, which could be exploited by attackers to read arbitrary files from the server using the privileges of the configured...
CVE-2020-1574
creationtimestamp| type| source ---|---|--- 2021-10-08 16:50:48+00:00| exploited| Telegram/t56b3Q9Pzy6RNlSuP7aXlCGnrtD6ypfrASOXqro 2021-10-08 16:50:51+00:00| seen| https://t.me/anwar1213xx/979...
CVE-2020-1585
creationtimestamp| type| source ---|---|--- 2021-10-08 16:50:48+00:00| exploited| Telegram/t56b3Q9Pzy6RNlSuP7aXlCGnrtD6ypfrASOXqro 2021-10-08 16:50:51+00:00| seen| https://t.me/anwar1213xx/979...
CVE-2020-1496
creationtimestamp| type| source ---|---|--- 2021-10-08 16:50:48+00:00| exploited| Telegram/t56b3Q9Pzy6RNlSuP7aXlCGnrtD6ypfrASOXqro 2021-10-08 16:50:51+00:00| seen| https://t.me/anwar1213xx/979...
CVE-2020-1494
creationtimestamp| type| source ---|---|--- 2021-10-08 16:50:48+00:00| exploited| Telegram/t56b3Q9Pzy6RNlSuP7aXlCGnrtD6ypfrASOXqro 2021-10-08 16:50:51+00:00| seen| https://t.me/anwar1213xx/979...
CVE-2020-1560
creationtimestamp| type| source ---|---|--- 2021-10-08 16:50:48+00:00| exploited| Telegram/t56b3Q9Pzy6RNlSuP7aXlCGnrtD6ypfrASOXqro 2021-10-08 16:50:51+00:00| seen| https://t.me/anwar1213xx/979...
CVE-2020-1495
creationtimestamp| type| source ---|---|--- 2021-10-08 16:50:48+00:00| exploited| Telegram/t56b3Q9Pzy6RNlSuP7aXlCGnrtD6ypfrASOXqro 2021-10-08 16:50:51+00:00| seen| https://t.me/anwar1213xx/979...
Spotweb Cross-Site Scripting Vulnerability (CNVD-2021-83613)
Spotweb is a Php-based Soptnet client that follows the Spotnet protocol from the Spotweb team. 1.5.1 and previous versions of Spotweb have a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side...
Spotweb Cross-Site Scripting Vulnerability (CNVD-2021-83615)
Spotweb is a Php-based Soptnet client that follows the Spotnet protocol from the Spotweb team. 1.5.1 and previous versions of Spotweb have a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side...
CVE-2021-37976
Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Recent assessments: gwillcox-r7 at October 02, 2021 7:27pm UTC reported: More info will be available at...
Photon OS 3.0: Httpd PHSA-2021-3.0-0309
An update of the httpd package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0309. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...
Mitigating CVE-2021-41773: Apache HTTP Server Path Traversal
On September 29, Ash Daulton, along with the cPanel Security Team, reported a path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.29 to the Apache security team. The issue was fixed within two days, under CVE-2021-41773, and the patch was released on October 4. Apache urged...
