Lucene search
+L

760 matches found

NVD
NVD
added 2021/05/27 5:15 p.m.39 views

CVE-2021-32645

Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL. This is only the case for installations where the...

6.1CVSS0.0102EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/27 5:15 p.m.34 views

CVE-2021-32645

Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL. This is only the case for installations where the...

6.1CVSS6.6AI score
SaveExploits0References4
Prion
Prion
added 2021/05/27 5:15 p.m.24 views

Open redirect

Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL. This is only the case for installations where the...

5.8CVSS6.2AI score0.0102EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/05/27 4:50 p.m.87 views

CVE-2021-32645

CVE-2021-32645 affects the open source Tenancy multi-tenant (Laravel) and describes an open redirect vulnerability. The issue occurs in configurations using the default Hostname Identification with tenants that have force_https set to true. Version 5.7.2 includes patches to fix the bug by strippi...

6.1CVSS5.2AI score0.0102EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/05/27 4:50 p.m.40 views

CVE-2021-32645 Open Redirect in tenancy

Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL. This is only the case for installations where the...

4.3CVSS6.4AI score0.0102EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/05/27 12:0 a.m.21 views

Tenancy multi-tenant 输入验证错误漏洞

Tenancy multi-tenant is an open source multi-domain controller. Tenancy multi-tenant suffers from an open redirection vulnerability that can be exploited by an attacker to redirect a user's site to any other site using a specially crafted URL...

6.1CVSS5.6AI score0.0102EPSS
SaveExploits0References5
OSV
OSV
added 2021/05/06 1:15 p.m.6 views

CVE-2021-1515

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with...

4.3CVSS5.8AI score0.00367EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/06 1:15 p.m.34 views

CVE-2021-1515

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with...

4.3CVSS0.00367EPSS
SaveExploits0References1
Prion
Prion
added 2021/05/06 1:15 p.m.30 views

Improper access control

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with...

3.3CVSS4.6AI score0.00367EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/05/06 12:51 p.m.67 views

CVE-2021-1515

CVE-2021-1515 concerns Cisco SD-WAN vManage Information Disclosure. Multiple connected sources describe an unauthenticated, adjacent attacker exploiting improper access controls on API endpoints in multi-tenant mode to access sensitive information, potentially including hashed credentials. Affect...

4.3CVSS4.5AI score0.00367EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/06 12:51 p.m.35 views

CVE-2021-1515 Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with...

4.3CVSS4.9AI score0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/05/06 12:51 p.m.9 views

CVE-2021-1515 Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with...

4.3CVSS6.5AI score0.00367EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/05/05 4:0 p.m.55 views

Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with...

4.3CVSS4.5AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/22 7:37 p.m.19 views

CVE-2021-0246 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default permissions assigned to tenant system administrators a tenant system administrator may inadvertently send their network traffic to one or more...

7.3CVSS7.3AI score0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/22 7:37 p.m.34 views

CVE-2021-0235 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

7.3CVSS7.3AI score0.00236EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/06 12:0 a.m.6 views

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2020-61017)

IBM QRadar is an enterprise security information and event management SIEM product that detects anomalies, finds advanced threats, and eliminates false positives. An information disclosure vulnerability exists in IBM QRadar SIEM 7.3 and 7.4 when using a multi-tenant configuration. Detailed...

3.2CVSS6.2AI score0.00341EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/05 5:15 p.m.19 views

CVE-2018-1725

IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440...

3.2CVSS3.4AI score0.00341EPSS
SaveExploits0References2
OSV
OSV
added 2020/11/05 5:15 p.m.6 views

CVE-2018-1725

IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440...

2.3CVSS5.8AI score0.00341EPSS
SaveExploits0References2
Prion
Prion
added 2020/11/05 5:15 p.m.17 views

Information disclosure

IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440...

2.1CVSS3.3AI score0.00341EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/11/05 4:45 p.m.44 views

CVE-2018-1725

IBM QRadar SIEM in a multi-tenant configuration is vulnerable to information disclosure (CVE-2018-1725). Affected products/versions: IBM QRadar SIEM 7.3.0–7.3.3 Patch 5 and 7.4.0–7.4.1 Patch 1. The IBM bulletin cites CVSS v3.0 vector CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N with a base score ...

3.2CVSS3.3AI score0.00341EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder