CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

824 matches found

Microsoft Secure•added 2023/11/07 5:00 p.m.•45 views

Digital security sessions at Microsoft Ignite to prepare you for the era of AI

Thousands of security professionals will join us for Microsoft Ignite 2023 from November 14 to 17, 2023, where we will share how to embrace the AI era confidently, with protection for people, data, devices, and apps that extends across clouds and platforms. With more than 45 security sessions,...

7.1AI score

SaveExploits0

Microsoft Malware Protection•added 2023/09/28 4:00 p.m.•40 views

Join the new Microsoft Security experience at Microsoft Ignite 2023

During the past few years, we’ve managed a lot of change and disruption in our security work, in our lives, and in society at large. This year we’re excited to welcome back security leaders, aspiring leaders, and IT professionals—in person—to Microsoft Ignite from November 14 to 17, 2023, and...

6.6AI score

SaveExploits0

Microsoft Secure•added 2023/09/28 4:00 p.m.•30 views

Join the new Microsoft Security experience at Microsoft Ignite 2023

6.6AI score

SaveExploits0

Trellix•added 2023/09/06 12:00 a.m.•77 views

The Bug Report – August 2023 Edition

The Bug Report – August 2023 Edition By Charles McFarland · September 06, 2023 Why am I here? Welcome back to The Bug Report, the hotter-than-hell Texas edition! For those still unfamiliar with our monthly escapades, every month our trusty Advanced Research Center vulnerability research team...

6.6AI score0.99999EPSS

SaveExploits73

hivepro•added 2023/08/25 2:19 p.m.•83 views

A Critical Vulnerability in Openfire Admin Console Actively Exploited in the Wild

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The vulnerability CVE-2023-32315 in Ignite Realtime Openfire, enabling unauthorized access to privileged pages. Attackers exploit this by bypassing authentication, prompting immediate updates for...

5CVSS7.8AI score0.99999EPSS

SaveExploits17

CISA KEV Catalog•added 2023/08/24 12:00 a.m.•60 views

Ignite Realtime Openfire Path Traversal Vulnerability

Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users...

8.6CVSS7.7AI score0.99999EPSS

SaveIn wildExploits17

osv-ghsa•added 2023/05/23 7:54 p.m.•81 views

GHSA-GW42-F939-FHVM Administration Console authentication bypass in openfire xmppserver

An important security issue affects a range of versions of Openfire, the cross-platform real-time collaboration server based on the XMPP protocol that is created by the Ignite Realtime community. Impact Openfire's administrative console the Admin Console, a web-based application, was found to be...

8.6CVSS7.2AI score0.99999EPSS

SaveExploits17References11

F5 Networks•added 2023/02/21 6:34 p.m.•58 views

K12487579: Apache vulnerabilities CVE-2018-1282, CVE-2018-1284, CVE-2018-1295, CVE-2018-1308, and CVE-2018-1315

Security Advisory Description CVE-2018-1282 This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation. CVE-2018-1284 In Apache Hive 0.6.0 to 2.3.2,...

9.8CVSS6.6AI score0.20823EPSS

SaveExploits0

SUSE CVE•added 2023/02/15 4:00 a.m.•13 views

SUSE CVE-2020-10650

A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core: org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup, org.apache.ignite.cache.jta.jndi.CacheJndiTmFactory, and...

8.1CVSS9.1AI score0.03471EPSS

SaveExploits1References3