Lucene search
K

13 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/31 9:15 p.m.2 views

CVE-2026-5214

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function...

9CVSS6.2AI score0.00715EPSS
Exploits1References5Affected Software20
Snyk
Snyk
added 2025/09/17 7:21 p.m.1 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the Manager web UI endpoints /api/v1/jobs and /preheats. An attacker can gain unauthorized access to create, delete, or modify jobs, and initiate preheat jobs by sending unauthenticated requests to these...

9.1CVSS6.8AI score0.00361EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/17 7:21 p.m.1 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the Manager web UI endpoints /api/v1/jobs and /preheats. An attacker can gain unauthorized access to create, delete, or modify jobs, and initiate preheat jobs by sending unauthenticated requests to these...

9.1CVSS6.8AI score0.00361EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/17 7:21 p.m.1 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the Manager web UI endpoints /api/v1/jobs and /preheats. An attacker can gain unauthorized access to create, delete, or modify jobs, and initiate preheat jobs by sending unauthenticated requests to these...

9.1CVSS6.8AI score0.00361EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/17 7:21 p.m.2 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the Manager web UI endpoints /api/v1/jobs and /preheats. An attacker can gain unauthorized access to create, delete, or modify jobs, and initiate preheat jobs by sending unauthenticated requests to these...

9.1CVSS6.8AI score0.00361EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.3 views

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) allows a attacker to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage relates to the lack of protection for the web page structure during the processing of element fields. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

4.3CVSS5.6AI score0.00352EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/07/10 12:0 a.m.18 views

Cisco Firepower Device Manager Web Interface Detection

Binary data ciscofirepowerdevicemanagerwebuidetect.nbin...

7.3AI score
Exploits0References1
CNVD
CNVD
added 2019/10/09 12:0 a.m.2 views

Cisco Unified Communications Manager WEB Interface SQL Injection Vulnerability

Cisco Unified Communications Manager is a unified communications solution. A SQL injection vulnerability exists in the Cisco Unified Communications Manager WEB interface, which could be exploited by remote attackers to submit a specially crafted SQL request to manipulate a database, obtain...

4.9CVSS8.4AI score0.01495EPSS
Exploits0References1
CNVD
CNVD
added 2017/05/22 12:0 a.m.0 views

Cisco Remote Expert Manager Temporary File Information Disclosure Vulnerability

Cisco Remote Expert Manager Software is the United States Cisco Cisco a remote management software. The software remote screen sharing, screen annotation and session recording and other collaborative functions. Cisco Remote Expert Manager Software has a temporary file information disclosure...

5.3CVSS6.6AI score0.02663EPSS
Exploits0References1
myhack58
myhack58
added 2016/06/03 12:0 a.m.24 views

Easily using Vulnerability CVE-2 0 1 6-4 5 0 2 ranged attack power plants-vulnerability warning-the black bar safety net

! Repair hopeless? You can only deactivate the function or replace the device! Recently,without a patch the vulnerability, CVE-2 0 1 6-4 5 0 2 be found use in industrial control systems,has now been found that power plants use industrial control system may be severely affected,contrive evil...

1.2AI score
Exploits0
Cvelist
Cvelist
added 2015/08/24 2:0 p.m.36 views

CVE-2015-0298

Cross-site scripting XSS vulnerability in the manager web interface in modcluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message...

5.5AI score0.01846EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2015/04/16 4:13 p.m.1 views

mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

A flaw was found in the way the modcluster manager processed certain MCMP messages. An attacker with access to the network from which MCMP messages are allowed to be sent could use this flaw to execute arbitrary JavaScript code in the modcluster manager web interface...

4.3CVSS7.4AI score0.01846EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2014/07/01 12:0 a.m.19 views

F5 Networks ARX Data Manager Web Interface Detection

Binary data f5datamanagerdetect.nbin...

7.3AI score
Exploits0References1
Rows per page
Query Builder