Lucene search
+L

138 matches found

Vulnrichment
Vulnrichment
added 2024/08/21 4:6 p.m.19 views

CVE-2024-7600 Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability

Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw...

7.1CVSS6.9AI score0.02016EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/21 4:6 p.m.41 views

CVE-2024-7600 Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability

Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw...

7.1CVSS0.02016EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.8 views

PT-2024-38443 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to...

6.5CVSS6.6AI score0.02382EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2024/08/08 12:0 a.m.11 views

Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability

This vulnerability allows local attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP port 443 by default. The issue...

5.1CVSS6.7AI score0.00343EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/08 12:0 a.m.11 views

Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP port 443 by default. The issue...

7.1CVSS6.7AI score0.02016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.12 views

PT-2024-38442 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this...

8.1CVSS6.9AI score0.01619EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.13 views

PT-2024-38444 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to delete arbitrary directories on affected installations. The flaw exists within the HTTP API service, which listens on TCP port...

8.1CVSS6.9AI score0.02016EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.9 views

PT-2024-38441 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this...

8.1CVSS6.9AI score0.02016EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2024/08/08 12:0 a.m.10 views

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP port 443 by default. The...

6.5CVSS6.2AI score0.02382EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/08/08 12:0 a.m.8 views

Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP port 443 by default. The issue...

7.1CVSS6.7AI score0.01619EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/06 4:15 p.m.7 views

CVE-2024-7564

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specif...

6.5CVSS5.7AI score0.01184EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/06 4:15 p.m.23 views

CVE-2024-7564

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specif...

6.5CVSS0.01184EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/06 3:47 p.m.12 views

CVE-2024-7564 Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specif...

4.3CVSS6AI score0.01184EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/06 3:47 p.m.29 views

CVE-2024-7564

Logsign Unified SecOps Platform is affected by a directory traversal and information disclosure in the get_response_json_result endpoint. The flaw arises from insufficient validation of a user-supplied path used in file operations, enabling disclosure of sensitive data to an attacker within the c...

6.5CVSS6.2AI score0.01184EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/06 3:47 p.m.32 views

CVE-2024-7564 Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specif...

4.3CVSS0.01184EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/08/06 7:49 a.m.483 views

Exploit for Improper Restriction of Excessive Authentication Attempts in Logsign Unified_Secops_Platform

Logsign SIEM RCE Exploit CVE-2024-5716 & CVE-2024-5717 This...

9.8CVSS9.6AI score0.02973EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2024/07/30 12:0 a.m.14 views

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the getresponsejsonresult endpoint. The issue results from the lack ...

4.3CVSS6.2AI score0.01184EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/07/30 12:0 a.m.5 views

PT-2024-38422 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to...

6.5CVSS6.5AI score0.01184EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2024/06/12 12:0 a.m.22 views

Logsign Unified SecOps Platform Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the lack of...

8.6CVSS7.4AI score0.01602EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/06/12 12:0 a.m.15 views

PT-2024-37098 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit...

8.1CVSS7.9AI score0.0583EPSS
SaveExploits0References4
Rows per page
Query Builder