Lucene search
+L

7436 matches found

CNVD
CNVD
added 2020/04/07 12:00 a.m.8 views

Paessler PRTG Network Monitor Information Disclosure Vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from the German company Paessler. A security vulnerability exists in Paessler PRTG Network Monitor versions prior to 20.1.57.1??745. The vulnerability can be exploited by a remote attacker to obtain...

5.3CVSS6.6AI score0.52059EPSS
SaveExploits0
NVD
NVD
added 2020/04/05 12:15 a.m.30 views

CVE-2020-11547

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...

5.3CVSS5.2AI score0.52059EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/05 12:15 a.m.15 views

CVE-2020-11547

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...

5.3CVSS5.8AI score0.52059EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/04 11:23 p.m.212 views

CVE-2020-11547

CVE-2020-11547 affects Paessler PRTG Network Monitor prior to 20.1.57.1745. The vulnerability is an information-disclosure flaw that allows remote unauthenticated attackers to retrieve details about probes running or the server (CPU usage, memory, Windows version, internal statistics) via HTTP re...

5.3CVSS5.2AI score0.52059EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/04 11:23 p.m.36 views

CVE-2020-11547

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...

5.3AI score0.52059EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/03 12:00 a.m.3 views

pomelo-monitor Command Injection Vulnerability

pomelo-monitor is a monitoring tool for operating systems and processes in nodejs. A command injection vulnerability exists in pomelo-monitor 0.3.7 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary commands...

9.8CVSS7.7AI score0.02175EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/02 9:15 p.m.6 views

CVE-2020-7620

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

9.8CVSS7.4AI score0.02175EPSS
SaveExploits0References2
NVD
NVD
added 2020/04/02 9:15 p.m.26 views

CVE-2020-7620

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

9.8CVSS9.8AI score0.02175EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/04/02 9:15 p.m.5 views

CVE-2020-7620

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

9.8CVSS8.8AI score0.02175EPSS
SaveExploits0References4
Prion
Prion
added 2020/04/02 9:15 p.m.15 views

Design/Logic Flaw

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

7.5CVSS9.7AI score0.02175EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/04/02 8:38 p.m.90 views

CVE-2020-7620

CVE-2020-7620 affects pomelo-monitor up to version 0.3.7. The vulnerability allows command injection through parameters passed to pomelo-monitor, enabling an attacker to execute arbitrary commands. CVSS data indicate a NETWORK, low complexity, no authentication, with high confidentiality, integri...

9.8CVSS9.8AI score0.02175EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/04/02 8:38 p.m.32 views

CVE-2020-7620

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...

9.9AI score0.02175EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/04/01 12:00 a.m.224 views

PRTG Network Monitor < 20.1.57.1745 RCE Vulnerability

PRTG Network Monitor is prone to an unauthenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

9.8CVSS9.8AI score0.04667EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/03/31 12:00 a.m.7 views

Paessler PRTG Network Monitor webserver component input validation error vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A security vulnerability exists in the webserver component of Paessler PRTG Network Monitor version 19.2.50 through PRTG version 20.1.56. A remote attacker could exploit the...

9.8CVSS7.1AI score0.04667EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/30 10:15 p.m.23 views

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

9.8CVSS9.5AI score0.04667EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/03/30 9:18 p.m.30 views

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

9.6AI score0.04667EPSS
SaveExploits0References3
CVE
CVE
added 2020/03/30 9:18 p.m.84 views

CVE-2020-10374

The CVE-2020-10374 affects Paessler PRTG Network Monitor (webserver component) from version 19.2.50 up to 20.1.56, enabling unauthenticated remote command execution via a crafted POST request or via the what parameter of the Contact Support form’s screenshot function. This is a remote, network-ac...

9.8CVSS9.4AI score0.04667EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/30 3:51 p.m.36 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-4276)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

7.5CVSS1.9AI score0.03121EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/03/26 12:00 a.m.10 views

Moo0 System Monitor Code Execution Vulnerability

Moo0 System Monitor is a suite of computer resource and performance monitoring programs. A security vulnerability exists in the WinRing0x64.sys file in Moo0 System Monitor version 1.83. The vulnerability can be exploited to execute Ring-0 code and elevate privileges with a specially crafted reque...

9CVSS7.3AI score0.02394EPSS
SaveExploits1
OSV
OSV
added 2020/03/25 5:15 p.m.11 views

CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

7.2CVSS6.2AI score0.02394EPSS
SaveExploits1References1
Rows per page
Query Builder