Lucene search
+L

6 matches found

NVD
NVD
•added 2024/03/22 2:15 p.m.•36 views

CVE-2024-2449

A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF...

7.5CVSS7.5AI score0.1288EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/22 1:35 p.m.•29 views

CVE-2024-2449 LoadMaster Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF...

7.5CVSS6.8AI score0.1288EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/22 1:35 p.m.•92 views

CVE-2024-2449

CVE-2024-2449 describes a cross-site request forgery in Kemp LoadMaster. An authenticated LoadMaster administrator, who knows the IP/hostname, can be lured to a malicious site where a CSRF payload issues HTTP transactions on behalf of the admin. The core impact is unauthorized actions performed i...

7.5CVSS7.5AI score0.1288EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/22 12:00 a.m.•1 views

CVE-2024-2449: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF...

7.5CVSS7.7AI score0.1288EPSS
SaveExploits0References3
Hewlett-Packard
Hewlett-Packard
•added 2018/04/13 12:00 a.m.•137 views

HPSBGN03565 rev.1 - Unsecure (http) Transactions in Isaac Mizrahi Smartwatch Mobile App

Potential Security Impact Potential theft of credentials and UI hijack Source: HP, HP Product Security Response Team PSRT Reported by: Jerry Decime VULNERABILITY SUMMARY A potential security vulnerability caused by the use of unsecure http transactions during login has been identified with early...

7.5CVSS2.1AI score0.01901EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2010/08/11 12:00 a.m.•47 views

Remote Code Execution Vulnerabilities in SChannel (980436)

This host is missing a critical security update according to Microsoft Bulletin MS10-049. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.8CVSS7.1AI score0.87264EPSS
SaveExploits16References3
Rows per page
Query Builder