Lucene search
+L

369 matches found

OSV
OSV
added 2021/05/26 9:15 p.m.13 views

CVE-2021-25643

An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or...

4.9CVSS5.8AI score0.00504EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/05/26 9:15 p.m.5 views

CVE-2021-25643

An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or...

4.9CVSS5.3AI score0.00504EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/05/26 8:09 p.m.25 views

CVE-2021-25643

An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or...

5.4AI score0.00504EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/10 1:15 p.m.13 views

CVE-2021-25645

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @nsserver, leaks credentials in cleartext in the cbcollectinfo.log, debug.log, nscouchdb.log, indexer.log, and stats.log files. NOTE:...

4.4CVSS5.8AI score0.00171EPSS
SaveExploits0References2
HackRead
HackRead
added 2020/12/29 5:22 p.m.54 views

Usenet indexer NZBGeek hacked; database stolen

By Deeba Ahmed Hackers installed keylogger and copied NZBGeek database exposing personal details of all users. This is a post from HackRead.com Read the original post: Usenet indexer NZBGeek hacked; database stolen...

2.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/10 12:00 a.m.29 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : dovecot Multiple Vulnerabilities (NS-SA-2020-0105)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dovecot packages installed that are affected by multiple vulnerabilities: - In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used ...

8.8CVSS7AI score0.02417EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/05/15 12:00 a.m.36 views

Amazon Linux AMI : dovecot (ALAS-2020-1363)

The version of dovecot installed on the remote host is prior to 2.2.36-6.19. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1363 advisory. In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker...

8.8CVSS7.1AI score0.02417EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2020/05/13 12:00 a.m.94 views

Microsoft Windows Multiple Vulnerabilities (KB4556813)

This host is missing a critical security update according to Microsoft KB4556813 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS7.4AI score0.54158EPSS
SaveExploits18References3
Veracode
Veracode
added 2020/04/01 12:38 a.m.34 views

Arbitrary Code Execution

dovecot is vulnerable to arbitrary code execution. A buffer overflow vulnerability in the indexer-worker process allows an attacker to execute arbitary code on the system...

8.8CVSS5.4AI score0.01178EPSS
SaveExploits0References18Affected Software1
RedHat Linux
RedHat Linux
added 2020/03/31 9:10 p.m.13 views

dovecot: Buffer overflow in indexer-worker process results in privilege escalation

In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components...

8.8CVSS7.6AI score0.01178EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:00 a.m.14 views

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.00756EPSS
SaveExploits0References3
OSV
OSV
added 2020/03/12 4:15 p.m.4 views

CVE-2020-0857

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00756EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/12 4:15 p.m.18 views

CVE-2020-0857

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'...

7.8CVSS8.7AI score0.00756EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/12 4:15 p.m.20 views

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'...

4.6CVSS7.7AI score0.00756EPSS
SaveExploits0References1Affected Software4
CVE
CVE
added 2020/03/12 3:48 p.m.110 views

CVE-2020-0857

CVE-2020-0857 is an elevation of privilege vulnerability in Windows: the Windows Search Indexer mishandles memory objects, enabling local attackers to gain elevated privileges. Affected: Windows Search Indexer process; root cause is memory handling. Impact per sources is elevation of privileges w...

7.8CVSS8.5AI score0.00756EPSS
SaveExploits0References1Affected Software7
Cvelist
Cvelist
added 2020/03/12 3:48 p.m.31 views

CVE-2020-0857

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'...

8.6AI score0.00756EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/12 12:00 a.m.12 views

Microsoft Windows Search Indexer Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Search Indexer is one of the Windows search indexers. An elevation ...

7.8CVSS7.6AI score0.00756EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2020/03/10 7:00 a.m.28 views

Windows Search Indexer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a...

7.8CVSS3.7AI score0.00756EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:00 a.m.14 views

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00788EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:00 a.m.14 views

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.1AI score0.00788EPSS
SaveExploits0References3
Rows per page
Query Builder