Lucene search
+L

3707 matches found

Citrix
Citrix
•added 2021/04/07 12:00 a.m.•30 views

Driving the Citrix Receiver Self-Service Plug-in Programmatically

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The Self-Service Plugin SSP is the component within Receiver 4.0 onwards that is responsible for...

6.4AI score
SaveExploits0
OSV
OSV
•added 2021/04/03 6:15 p.m.•18 views

CVE-2021-30127

TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the "It is only available on the local network" documentation. NOTE: manually editing /etc/upnp.json provides a partial but...

7.3CVSS5.8AI score0.0085EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/04/03 6:15 p.m.•11 views

CVE-2021-30127

TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the "It is only available on the local network" documentation. NOTE: manually editing /etc/upnp.json provides a partial but...

7.5CVSS7AI score0.0085EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/03/30 12:00 a.m.•18 views

IBM UrbanCode Deploy 安全漏洞

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

5.5CVSS5.9AI score0.00582EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/03/25 12:00 a.m.•23 views

Cisco IOS XE elevation of privilege vulnerability (CNVD-2021-22187)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An elevation of privilege vulnerability exists in the diagnostic command of the Plug and Play PnP subsystem of Cisco IOS XE. The vulnerability stems from inadequate protection of...

7.8CVSS6.6AI score0.00249EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/24 8:15 p.m.•12 views

CVE-2021-1442

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

7.8CVSS7.1AI score0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/03/24 8:06 p.m.•41 views

CVE-2021-1442 Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

7CVSS7.9AI score0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/03/24 8:06 p.m.•6 views

CVE-2021-1442 Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

7CVSS5.7AI score0.00249EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/24 4:00 p.m.•13 views

CVE-2021-1442

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

7.8CVSS7.2AI score0.00249EPSS
SaveExploits0References2
Cisco
Cisco
•added 2021/03/24 4:00 p.m.•95 views

Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

7CVSS7.7AI score0.00249EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/24 12:00 a.m.•14 views

Cisco IOS XE Software 日志信息泄露漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An elevation of privilege vulnerability exists in the diagnostic command of the Plug and Play PnP subsystem of Cisco IOS XE. The vulnerability stems from inadequate protection of...

7.8CVSS7.1AI score0.00249EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/03/20 12:00 a.m.•31 views

Fedora: Security Advisory for switchboard-plug-bluetooth (FEDORA-2021-6210be0100)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS8.2AI score0.00637EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/03/20 12:00 a.m.•39 views

Fedora: Security Advisory for switchboard-plug-bluetooth (FEDORA-2021-7d55c00267)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS8.2AI score0.00637EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/03/18 12:00 a.m.•29 views

Fedora 32 : switchboard-plug-bluetooth (2021-7d55c00267)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-7d55c00267 advisory. - Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the...

8.1CVSS7.7AI score0.00637EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/03/17 12:00 a.m.•29 views

Fedora 33 : switchboard-plug-bluetooth (2021-3dedd41a06)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-3dedd41a06 advisory. - Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the...

8.1CVSS7.7AI score0.00637EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/03/17 12:00 a.m.•18 views

The vulnerability of the Windows UPnP Device Host service allows attackers to increase their privileges.

The vulnerability of the Windows UPnP Device Host service in the Windows operating system is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.4AI score0.00965EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/03/17 12:00 a.m.•32 views

Fedora: Security Advisory for switchboard-plug-bluetooth (FEDORA-2021-3dedd41a06)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS8.2AI score0.00637EPSS
SaveExploits0References2
NVD
NVD
•added 2021/03/15 10:15 p.m.•42 views

CVE-2021-26987

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services...

9.8CVSS0.0244EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/15 10:15 p.m.•12 views

CVE-2021-26987

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services...

9.8CVSS8.6AI score0.0244EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/15 10:15 p.m.•41 views

Remote code execution

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services...

7.5CVSS9.4AI score0.0244EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder