Lucene search
+L

4675 matches found

exploitpack
exploitpack
added 2019/10/23 12:0 a.m.63 views

Rocket.Chat 2.1.0 - Cross-Site Scripting

Rocket.Chat 2.1.0 - Cross-Site Scripting Title: Rocket.Chat 2.1.0 - Cross-Site Scripting Author: 3H34N Date: 2019-10-22 Product: Rocket.Chat Vendor: https://rocket.chat/ Vulnerable Versions: Rocket.Chat 2. Open a chat session 3. Send payload with your web server url 4. Token will be written in...

4.3CVSS6.1AI score0.04023EPSS
SaveExploits5
Amazon
Amazon
added 2019/10/21 12:0 a.m.24 views

Low: keycloak-httpd-client-install

Issue Overview: It was discovered that keycloak-httpd-client-install uses a predictable log file name in /tmp. A local attacker could create a symbolic link to a sensitive location, possibly causing data corruption or denial of service.CVE-2017-15111 In keycloak-http-client-install prior to versi...

7.8CVSS6.8AI score0.00386EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/10/18 12:0 a.m.61 views

Cisco Unity Connection libSRTP Denial of Service Vulnerability

A vulnerability in local file management for Cisco Unity Connection could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction...

7.8CVSS7.3AI score0.01984EPSS
SaveExploits0References3
Prion
Prion
added 2019/10/16 7:15 p.m.16 views

Authentication flaw

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to logclear.php, which could be used to erase attack traces...

6.4CVSS9.2AI score0.01524EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/10/16 6:32 p.m.40 views

CVE-2019-17512

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to logclear.php, which could be used to erase attack traces...

9.3AI score0.01524EPSS
SaveExploits1References2
CVE
CVE
added 2019/10/16 6:32 p.m.74 views

CVE-2019-17512

CVE-2019-17512 affects D-Link DIR-412 devices (A1-1.14WW). The issue arises from web interfaces that allow unauthenticated users to clear the router’s log by invoking log_clear.php with act=clear&logtype=sysact, which could erase attack traces. The NVD entry notes a base score of 6.4 (CVSS2) and ...

9.1CVSS9.2AI score0.01524EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2019/10/15 12:0 a.m.8 views

cPanel Authorization Issues Vulnerability (CNVD-2019-36124)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in cPanel. An attacker can exploit this vulnerability to create the cpdavderrorlog fi...

2.5CVSS6.9AI score0.00284EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/14 4:15 p.m.23 views

CVE-2019-17511

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via logget.php, which could be used to discover the intranet network structure...

7.5CVSS7.6AI score0.01591EPSS
SaveExploits1References2
Prion
Prion
added 2019/10/14 4:15 p.m.18 views

Authentication flaw

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via logget.php, which could be used to discover the intranet network structure...

5CVSS7.6AI score0.01591EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/10/14 3:1 p.m.30 views

CVE-2019-17511

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via logget.php, which could be used to discover the intranet network structure...

7.7AI score0.01591EPSS
SaveExploits1References2
CVE
CVE
added 2019/10/14 3:1 p.m.75 views

CVE-2019-17511

CVE-2019-17511 affects D-Link DIR-412 A1-1.14WW routers. The issue is exposed web pages that operate without authentication (notably log_get.php), enabling an attacker to retrieve the router’s log file and potentially map the intranet network structure. The root cause is lack of authentication on...

7.5CVSS7.6AI score0.01591EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2019/10/14 2:15 p.m.5 views

CVE-2019-4572

IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM X-Force ID: 166798...

4.4CVSS5.8AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
added 2019/10/14 2:15 p.m.24 views

CVE-2019-4572

IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM X-Force ID: 166798...

4.4CVSS4.2AI score0.00305EPSS
SaveExploits0References2
CVE
CVE
added 2019/10/14 1:55 p.m.64 views

CVE-2019-4572

IBM FileNet Content Manager 5.5.2 and 5.5.3 (in specific configurations) could log web service user credentials to local logs, exposing credentials to local administrators. The IBM bulletin (Security Bulletin: IBM FileNet Content Manager and Case Foundation security vulnerability in Process Orche...

4.4CVSS4.4AI score0.00305EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/14 1:55 p.m.29 views

CVE-2019-4572

IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM X-Force ID: 166798...

4.1CVSS4.5AI score0.00305EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2019/10/12 1:20 a.m.21 views

CVE-2017-15111

It was discovered that keycloak-httpd-client-install uses a predictable log file name in /tmp. A local attacker could create a symbolic link to a sensitive location, possibly causing data corruption or denial of service...

5.5CVSS2AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/09 8:15 p.m.30 views

CVE-2019-0069

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

5.9CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Prion
Prion
added 2019/10/09 8:15 p.m.21 views

Design/Logic Flaw

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

2.1CVSS5.6AI score0.00229EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/10/09 7:26 p.m.45 views

CVE-2019-0069 Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

5.9CVSS5.6AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2019/10/08 6:41 p.m.113 views

CVE-2019-10963

CVE-2019-10963 affects Moxa EDR-810 Series routers (all versions 5.1 and prior). An unauthenticated attacker can retrieve log files from the device, potentially disclosing sensitive information due to improper access control. Mitigation per public advisories is upgrading to firmware 5.2 or later ...

4.3CVSS4.9AI score0.06499EPSS
SaveExploits5References2Affected Software1
Rows per page
Query Builder