Lucene search
+L

1910 matches found

OSV
OSV
added 2021/03/25 8:15 p.m.9 views

CVE-2021-27438

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

8.8CVSS5.8AI score0.01211EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/25 8:15 p.m.9 views

CVE-2021-27440

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

9.8CVSS7.3AI score0.01351EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/25 8:15 p.m.5 views

CVE-2021-27438

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

8.8CVSS8AI score0.01211EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/25 8:15 p.m.19 views

Hardcoded credentials

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

6.5CVSS9.2AI score0.01211EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/25 8:15 p.m.6 views

CVE-2021-27440

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

9.8CVSS8.4AI score0.01351EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/25 7:28 p.m.68 views

CVE-2021-27440

Summary: CVE-2021-27440 concerns GE Reason DR60 firmware with a hard-coded password used for inbound authentication or outbound communication to external components in all versions before 02A04.1. Affected product/versions (as stated): Reason DR60 firmware prior to 02A04.1. Root cause (as describ...

9.8CVSS9.5AI score0.01351EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/03/25 7:26 p.m.82 views

CVE-2021-27438

CVE-2021-27438 concerns GE Reason DR60 firmware prior to 02A04.1, where externally influenced input can be used to construct code segments, enabling a code injection vulnerability. The vulnerability affects the DR60 digital fault recorder, with impact described as allow code execution through cra...

8.8CVSS8.8AI score0.01211EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/03/25 12:0 a.m.12 views

GitLab server-side request forgery vulnerability (CNVD-2021-26069)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A server-side request forgery vulnerability exists in GitLab, which can be exploited to conduct...

5.5CVSS6.5AI score0.00946EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/03/25 12:0 a.m.11 views

PT-2021-17452 · Unknown · Reason Dr60

Name of the Vulnerable Software and Affected Versions: Reason DR60 versions prior to 02A04.1 Description: The software contains a hard-coded password used for inbound authentication or outbound communication to external components. Recommendations: For versions prior to 02A04.1, update to version...

9.8CVSS9.7AI score0.01351EPSS
SaveExploits0References3
NVD
NVD
added 2021/03/24 9:15 p.m.21 views

CVE-2020-7853

An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An attacker can exploit arbitrary code execution...

9.8CVSS0.0083EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/24 8:55 p.m.82 views

CVE-2020-7853

CVE-2020-7853 affects Tobesoft XPLATFORM. The vulnerability arises from an unchecked offset input range enabling out-of-bounds read/write, which can allow an attacker to achieve arbitrary code execution. Public sources (CNVD-2021-25270, CVE records) describe the same issue as an offset-range chec...

9.8CVSS7.8AI score0.0083EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/03/24 5:15 p.m.33 views

CVE-2021-22179

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature...

5.5CVSS0.00946EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/24 5:15 p.m.25 views

CVE-2021-22179

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature...

5.4CVSS6.3AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/24 5:15 p.m.5 views

CVE-2021-22179

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature...

5.5CVSS6AI score0.00946EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/03/24 5:15 p.m.29 views

CVE-2021-22179

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature...

5.5CVSS6.1AI score0.00946EPSS
SaveExploits0References4
Prion
Prion
added 2021/03/24 5:15 p.m.16 views

Design/Logic Flaw

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature...

5.5CVSS5.1AI score0.00946EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/03/24 5:15 p.m.7 views

UBUNTU-CVE-2021-22179

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature...

5.4CVSS5.8AI score0.00946EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/03/24 4:48 p.m.36 views

CVE-2021-22179

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature...

5.4CVSS5.4AI score0.00946EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2021/03/24 4:48 p.m.51 views

CVE-2021-22179

Removed by vendor...

5.5CVSS6AI score0.00946EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.10 views

GitLab 代码问题漏洞

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A server-side request forgery vulnerability exists in GitLab, which can be exploited to conduct...

5.5CVSS5.7AI score0.00946EPSS
SaveExploits0References4
Rows per page
Query Builder