Lucene search
K

547 matches found

Patchstack
Patchstack
added 2024/03/27 12:0 a.m.32 views

WordPress Networker Theme <= 1.1.9 is vulnerable to Broken Access Control

Software Networker Type Theme Vulnerable versions = 1.1.9 Fixed in 1.1.10 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2962 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c70a9d136cac Credits Muhammad Zeeshan Xib3rR4dAr Required...

5.3CVSS6.6AI score0.00504EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.4 views

WordPress Theme Networker 安全漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress Theme Networker 1.1.9 and earlier versions, which stems...

5.3CVSS8.3AI score0.00504EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:0 a.m.3 views

The vulnerability of the Dell EMC NetWorker backup and data recovery system, related to insufficient protection of registration data, allows a perpetrator to obtain user registration data.

The vulnerability of the Dell EMC NetWorker backup and data recovery system lies in the insufficient protection of registration data. Exploiting these vulnerabilities could allow attackers to obtain user registration data...

7.8CVSS6.6AI score0.00136EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2024/01/29 12:0 a.m.8 views

Dell NetWorker Information Disclosure Vulnerability

Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. An information disclosure vulnerability exists in Dell NetWorker, which arises from the database storing plain text passwords in a temporary configuration file during backups, and can be exploited...

7.8CVSS6.6AI score0.00136EPSS
Exploits0References1
OSV
OSV
added 2024/01/25 3:15 p.m.1 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

6.5CVSS5.7AI score0.00136EPSS
Exploits0References1
NVD
NVD
added 2024/01/25 3:15 p.m.16 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

7.8CVSS7.4AI score0.00136EPSS
Exploits0References1
Prion
Prion
added 2024/01/25 3:15 p.m.13 views

Design/Logic Flaw

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

1.7CVSS6.8AI score0.00136EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/25 2:53 p.m.15 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

7.8CVSS6.5AI score0.00136EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/25 2:53 p.m.13 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

7.8CVSS7.6AI score0.00136EPSS
Exploits0References1
CVE
CVE
added 2024/01/25 2:53 p.m.56 views

CVE-2024-22432

Dell EMC NetWorker ( Networker) versions 19.9 and earlier store a plain-text password in a temporary configuration file during NMDA MySQL backups. This enables a low-privilege local attacker with access to the Networker Client system to potentially disclose credentials and use them to access the ...

7.8CVSS6.3AI score0.00136EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/25 12:0 a.m.4 views

Dell NetWorker 安全漏洞

Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. An information disclosure vulnerability exists in Dell NetWorker, which arises from the database storing plain text passwords in a temporary configuration file during backups, and can be exploited...

7.8CVSS6.5AI score0.00136EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/01/25 12:0 a.m.4 views

PT-2024-2070 · Dell Emc · Dell Emc Networker

Name of the Vulnerable Software and Affected Versions: Dell EMC NetWorker versions 19.9 and all prior versions Description: The issue is related to insufficient protection of registration data, which may allow an attacker to obtain user registration data. Specifically, a plain-text password is...

7.8CVSS6.4AI score0.00136EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2023/12/22 12:0 a.m.24 views

Dell NetWorker Virtual Edition Weak SSH Cryptography (DSA-2023-358)

The version of Dell NetWorker Virtual Edition installed on the remote Linux host is prior to 19.7, 19.7.0.x prior to 19.7.0.6, 19.7.1, 19.8.x prior to 19.8.0.4 or 19.9.x prior to 19.9.0.3. It is, therefore, affected by vulnerability in the SSH component. Due to use of deprecated cryptographic...

5.3CVSS5.8AI score0.00404EPSS
Exploits0References2
CNVD
CNVD
added 2023/12/20 12:0 a.m.22 views

Dell NetWorker Encryption Issue Vulnerability

Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. A cryptographic issue vulnerability exists in Dell NetWorker Virtual Edition 19.8 and prior versions, which stems from the use of an unrecommended encryption algorithm by the SSH component, and ca...

5.3CVSS6.6AI score0.00404EPSS
Exploits0References1
OSV
OSV
added 2023/12/18 12:15 p.m.2 views

CVE-2023-28053

Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure...

5.3CVSS5.8AI score0.00404EPSS
Exploits0References1
NVD
NVD
added 2023/12/18 12:15 p.m.17 views

CVE-2023-28053

Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure...

5.3CVSS0.00404EPSS
Exploits0References1
Prion
Prion
added 2023/12/18 12:15 p.m.20 views

Information disclosure

Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure...

5CVSS6.8AI score0.00404EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/18 11:30 a.m.20 views

CVE-2023-28053

Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure...

5.3CVSS5.5AI score0.00404EPSS
Exploits0References1
CVE
CVE
added 2023/12/18 11:30 a.m.50 views

CVE-2023-28053

Dell NetWorker Virtual Edition versions 19.8 and earlier are affected by a vulnerability in the SSH component due to the use of deprecated cryptographic algorithms, enabling an unauthenticated remote attacker to potentially disclose information. Affected products include Dell NetWorker Virtual Ed...

5.3CVSS5.2AI score0.00404EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/18 12:0 a.m.1 views

Dell NetWorker 加密问题漏洞

Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. A cryptographic issue vulnerability exists in Dell NetWorker Virtual Edition 19.8 and prior versions, which stems from the use of an unrecommended encryption algorithm by the SSH component, and ca...

5.3CVSS6.5AI score0.00404EPSS
Exploits0References2
Rows per page
Query Builder