Lucene search
+L

4767 matches found

OSV
OSV
added 2021/09/21 3:15 p.m.9 views

CVE-2021-41525

An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior...

5.5CVSS5.8AI score0.00226EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/21 3:15 p.m.6 views

CVE-2021-41525

An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior...

5.5CVSS6AI score0.00226EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/09/21 2:35 p.m.30 views

CVE-2021-41525

An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior...

5.6AI score0.00226EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/21 2:35 p.m.57 views

CVE-2021-41525

CVE-2021-41525 affects FlexNet Inventory Agent/Inventory Beacon (versions 2020 R2.5 and earlier). The issue allows a locally authenticated attacker to modify otherwise restricted files. The available documents consistently describe the vulnerability in terms of unauthorized modification after loc...

5.5CVSS5.3AI score0.00226EPSS
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2021/09/20 1:00 p.m.45 views

Bring Your APIs Out of the Shadows to Protect Your Business

Pankaj Gupta, Senior Director, Citrix APIs are immensely more complex to secure. What was previously one request to one server has become dozens or hundreds of requests to dozens or hundreds of entities. In the past, you defended one large application with a single front door. Now you must defend...

10CVSS8.6AI score0.11084EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2021/09/08 7:22 p.m.21 views

Important: Red Hat Bug Fix Advisory: Red Hat Ansible Tower 3.8.4-1 - Container

Red Hat Ansible Tower 3.8.4-1 - Container Running inventories of 60k hosts no longer takes a very long time for events to show up Removed artifactdata from data sent to analytics as part of playbookonstats, since artifactdata can contain PII or sensitive data Regular users are no longer...

9.8CVSS7AI score0.53461EPSS
SaveExploits12
OSV
OSV
added 2021/09/07 2:15 p.m.8 views

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

4.9CVSS5.8AI score0.00909EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/09/07 2:15 p.m.40 views

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

4.9CVSS5.9AI score0.00909EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/09/07 2:15 p.m.8 views

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

4.9CVSS5.2AI score0.00909EPSS
SaveExploits0References4
OSV
OSV
added 2021/09/07 2:15 p.m.7 views

UBUNTU-CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

4.9CVSS5.8AI score0.00909EPSS
SaveExploits0References3
Prion
Prion
added 2021/09/07 2:15 p.m.19 views

Design/Logic Flaw

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

4CVSS5AI score0.00909EPSS
SaveExploits0References2Affected Software2
Debian CVE
Debian CVE
added 2021/09/07 1:03 p.m.44 views

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

4.9CVSS5AI score0.00909EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/09/07 1:03 p.m.30 views

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

5.3AI score0.00909EPSS
SaveExploits0References2
CVE
CVE
added 2021/09/07 1:03 p.m.67 views

CVE-2021-27022

CVE-2021-27022 affects bolt-server and ace; vulnerable on SSH/WinRM inventory service nodes where running a task with sensitive parameters causes those parameters to be logged. The issue is described consistently across Red Hat, NVD/NVD feed, Ubuntu, Debian, and OSV/etc. The provided documents do...

4.9CVSS5AI score0.00909EPSS
SaveExploits0References2Affected Software2
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/08/25 6:52 a.m.36 views

Improper Assets Management☝️ — What you need to know

Improper Assets Management☝️ — What you need to know Introduction API9:2019 Improper Assets Management What is Improper Assets Management? We should always wonder for every API if all the current endpoint should even be available and if we maybe can’t do with only allowing the API to communicate...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/08/11 11:33 a.m.66 views

MSPs and MSSPs Can Increase Profit Margins With Cynet 360 Platform

As cyber threats keep on increasing in volume and sophistication, more and more organizations acknowledge that outsourcing their security operations to a 3rd-party service provider is a practice that makes the most sense. To address this demand, managed security services providers MSSPs and manag...

SaveExploits0
CNVD
CNVD
added 2021/07/23 12:00 a.m.55 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

Bakeshop Inventory System is a bakery inventory management system. sourceCodester Sales and Inventory System has a security vulnerability that can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter to ahiraadmin Inventory . php...

9.8CVSS5.8AI score0.01517EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/22 6:15 p.m.23 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS0.01517EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/22 6:15 p.m.7 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS6.1AI score0.01517EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/22 6:15 p.m.15 views

Sql injection

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

7.5CVSS9.8AI score0.01517EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder