Lucene search
+L

10131 matches found

OSV
OSV
•added 2016/04/11 3:59 p.m.•18 views

DEBIAN-CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

8.8CVSS6.9AI score0.03448EPSS
SaveExploits0References1
Prion
Prion
•added 2016/04/11 3:59 p.m.•27 views

Open redirect

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

9CVSS6.5AI score0.03448EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
•added 2016/04/11 3:59 p.m.•31 views

CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

9CVSS7.2AI score0.03448EPSS
SaveExploits0References2
OSV
OSV
•added 2016/04/11 3:59 p.m.•14 views

UBUNTU-CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

8.8CVSS5.8AI score0.03448EPSS
SaveExploits0References3
Mend
Mend
•added 2016/04/11 3:00 p.m.•3 views

CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

9CVSS0.03448EPSS
SaveExploits0References3
Prion
Prion
•added 2016/04/11 2:59 p.m.•31 views

Design/Logic Flaw

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers...

5CVSS7.1AI score0.01765EPSS
SaveExploits0References2Affected Software10
NVD
NVD
•added 2016/04/11 2:59 p.m.•39 views

CVE-2015-8240

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers...

7.5CVSS7.4AI score0.01765EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/04/11 2:00 p.m.•51 views

CVE-2015-8240

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers...

7.4AI score0.01765EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/04/11 12:00 a.m.•2 views

PT-2016-3871

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions prior to 11.4.1 HF10 F5 BIG-IP LTM versions 11.5.x prior to 11.5.4 F5 BIG-IP LTM versions 11.6.x prior to 11.6.0 HF6 F5 BIG-IP AAM versions prior to 11.4.1 HF10 F5 BIG-IP AAM versions 11.5.x prior to 11.5.4 F5 BIG-IP AAM...

7.5CVSS0.01765EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/11 12:00 a.m.•5 views

CVE-2016-1235: Undefined Security Weakness

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

9CVSS7.9AI score0.03448EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/11 12:00 a.m.•6 views

CVE-2015-8240: Undefined Security Weakness

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers...

7.5CVSS7.3AI score0.01765EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2016/04/10 12:19 p.m.•20 views

APITest.IO: Clickjacking: X-Frame-Options header missing

same as this report https://hackerone.com/reports/7492 vulnerable :- sign in ,sign up ,and main domain poc attached...

0.2AI score
SaveExploits0
OSV
OSV
•added 2016/04/07 7:59 p.m.•15 views

CVE-2016-0734

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a 1 FRAME or 2 IFRAME element...

6.1CVSS6.1AI score
SaveExploits0References6
Prion
Prion
•added 2016/04/07 7:59 p.m.•32 views

Design/Logic Flaw

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a 1 FRAME or 2 IFRAME element...

4.3CVSS6.8AI score0.08618EPSS
SaveExploits0References6Affected Software1
Mend
Mend
•added 2016/04/07 7:00 p.m.•3 views

CVE-2016-0734

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a 1 FRAME or 2 IFRAME element...

6.1CVSS0.08618EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2016/04/07 12:00 a.m.•3 views

PT-2016-1672

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions 5.x before 5.13.2 Description The issue is related to the web-based administration console in Apache ActiveMQ, which does not send an X-Frame-Options HTTP header. This makes it easier for remote attackers to conduct...

6.1CVSS0.08618EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/07 12:00 a.m.•9 views

CVE-2016-0734: Undefined Security Weakness

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a 1 FRAME or 2 IFRAME element...

6.1CVSS6.4AI score0.08618EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/04/05 12:00 a.m.•4 views

PT-2016-4660

Name of the Vulnerable Software and Affected Versions OAR versions prior to 2.5.7 Description The issue allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges. This is related to vectors involving OpenSSH options in the oarsh script...

9CVSS0.03448EPSS
SaveExploits0References11
hackapp
hackapp
•added 2016/04/01 9:02 a.m.•5 views

Binary Options Trading Signals - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Binary Options Trading Signals published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:00 a.m.•9 views

$10,000 Binary Options Demo - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application $10,000 Binary Options Demo published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder