Lucene search
+L

72 matches found

Positive Technologies
Positive Technologies
added 2022/08/31 12:0 a.m.9 views

PT-2022-20935 · Watchguard · Fireware Os +2

Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances versions prior to 12.1.4 WatchGuard Firebox and XTM appliances versions prior to 12.5.10 WatchGuard Firebox and XTM appliances versions prior to 12.8.1 Description: The issue allows an unauthenticated...

7.5CVSS7.7AI score0.01587EPSS
SaveExploits1References7
NVD
NVD
added 2022/04/13 6:15 p.m.35 views

CVE-2022-22955

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...

9.8CVSS0.08087EPSS
SaveExploits5References1
ATTACKERKB
ATTACKERKB
added 2022/04/13 6:15 p.m.8 views

CVE-2022-22955

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...

9.8CVSS7.5AI score0.50694EPSS
SaveExploits5References2
NVD
NVD
added 2022/04/13 6:15 p.m.25 views

CVE-2022-22956

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...

9.8CVSS0.50694EPSS
SaveExploits5References3
OSV
OSV
added 2022/04/13 6:15 p.m.6 views

CVE-2022-22955

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...

9.8CVSS7.6AI score0.50694EPSS
SaveExploits5References1
Prion
Prion
added 2022/04/13 6:15 p.m.26 views

Authentication flaw

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...

7.5CVSS9.7AI score0.50694EPSS
SaveExploits5References3Affected Software3
Prion
Prion
added 2022/04/13 6:15 p.m.24 views

Authentication flaw

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...

7.5CVSS9.7AI score0.50694EPSS
SaveExploits5References1Affected Software3
Cvelist
Cvelist
added 2022/04/13 5:5 p.m.220 views

CVE-2022-22955

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...

10AI score0.50694EPSS
SaveExploits5References1
OSV
OSV
added 2021/10/28 4:15 p.m.11 views

CVE-2021-22044

In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level @RequestMappingannotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to @RequestMapping-annotated interface methods...

7.5CVSS7.3AI score0.01065EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/14 12:15 p.m.13 views

CVE-2021-38164

SAP ERP Financial Accounting RFOPENPOSTINGFR versions - SAPAPPL - 600, 602, 603, 604, 605, 606, 616, SAPFIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific user...

5.5CVSS6.5AI score0.00482EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2020/12/23 12:0 a.m.14 views

Urve Access Control Error Vulnerability

Urve is a device for booking meeting rooms/rooms from Urve UK. The device supports integration with MS Exchange, Lotus, Office 365, Google Calendar and other systems to support meeting room and guest room reservations. An Access Control Error vulnerability exists in URVE Build 24.03.2020, which...

9.1CVSS7.2AI score0.02834EPSS
SaveExploits2References6
Metasploit
Metasploit
added 2018/11/06 12:0 a.m.23 views

Vulnerable domain identification

Identifying potentially vulnerable Exchange endpoints Module Options msf use auxiliary/scanner/msmail/host/id msf undefinedid show actions ...actions... msf undefinedid set ACTION msf undefinedid show options ...show and set options... msf undefinedid run...

5.3AI score
SaveExploits0
Rows per page
Query Builder