CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

55 matches found

IBM Security Bulletins•added 2022/01/04 4:53 p.m.•83 views

Security Bulletin: Vulnerability in Apache Log4J adressed in Crypto Hardware Initialization and Maintenance (CVE-2021-44228)

Summary Crypto Hardware Initialization and Maintenance CHIM 3.0.0 as shipped with CCA 7.2.55 for MTM 4769 is affected by a vulnerability in Apache Log4J CVE-2021-44228. CHIM is using Apache Log4J for internal logging purposes of regular user activity. Vulnerability Details CVEID: CVE-2021-44228...

10CVSS1.1AI score0.99999EPSS

SaveExploits361Affected Software1

OSV•added 2021/07/30 2:15 p.m.•9 views

CVE-2021-28674

The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...

5.4CVSS5.8AI score0.00908EPSS

SaveExploits0References2

ATTACKERKB•added 2021/07/30 2:15 p.m.•7 views

CVE-2021-28674

5.5CVSS5.5AI score0.00908EPSS

SaveExploits0References3

CNNVD•added 2021/07/30 12:00 a.m.•8 views

Solarwinds Orion Platform 安全漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network, etc....

5.5CVSS5.7AI score0.00908EPSS

SaveExploits0References3

CVE•added 2021/07/27 3:41 p.m.•67 views

CVE-2021-28674

The CVE-2021-28674 entry concerns SolarWinds Orion Platform prior to 2020.2.5 HF1. The node management page (Services/NodeManagement.asmx/DeleteObjNow) allows an authenticated user with node-management rights to create or delete nodes outside the attacker’s perimeter due to predictable, increment...

5.5CVSS5.3AI score0.00908EPSS

SaveExploits0References2Affected Software1

Kitploit•added 2019/04/15 1:07 p.m.•185 views

W12Scan - A Simple Asset Discovery Engine For Cybersecurity

Chinese W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. Here is a web source program, but the scanning end is at w12scan-client Thinking Based on python3 + django + elasticsearch + redis and use the web restful api to add scan...

7.3AI score

SaveExploits0References5

OSV•added 2017/12/14 2:51 p.m.•9 views

SUSE-SU-2017:3311-1 Security update for slurm

This update for slurm fixes the following issues: Slurm was updated to 17.02.9 to fix a security bug, bringing new features and bugfixes fate323998 bsc1067580. Security issue fixed: CVE-2017-15566: Fix security issue in Prolog and Epilog by always prepending SPANK to all user-set environment...

7.8CVSS8.8AI score0.00578EPSS

SaveExploits0References7