Lucene search
+L

7505 matches found

HackRead
HackRead
added 2021/02/18 6:3 p.m.16 views

Features to look for when choosing VoIP phone system

By Owais Sultan As VoIP is replacing PBX inside big businesses, it can be difficult to know which service provider to choose from. Here's what you should do. This is a post from HackRead.com Read the original post: Features to look for when choosing VoIP phone system...

2.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.8 views

The vulnerability of the org.aoju.busproxy.provider.remoting.RmiProvider component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the org.aoju.busproxy.provider.remoting.RmiProvider component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

9.3CVSS7AI score0.08028EPSS
SaveExploits0References13Affected Software30
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.9 views

The vulnerability of the org.aoju.busproxy.provider.remoting.RmiProvider component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the org.aoju.busproxy.provider.remoting.RmiProvider component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

9.3CVSS6.8AI score0.03538EPSS
SaveExploits0References11Affected Software31
Veracode
Veracode
added 2021/02/15 6:0 a.m.22 views

Insecure Token Validation

next-auth is using an insecure token validation. A valid token assigned to one user can be used to sign in as another user when using the Prima adapter in conjunction with the Email provider because an identifier an email address associated with the token is not checked at the time of token...

6.1CVSS2.8AI score0.01667EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2021/02/11 10:15 p.m.13 views

CVE-2021-21310

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

6.1CVSS0.01667EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/11 10:15 p.m.11 views

CVE-2021-21310

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

5.9CVSS5.7AI score
SaveExploits0References3
Prion
Prion
added 2021/02/11 10:15 p.m.20 views

Default configuration

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

4.3CVSS5.6AI score0.01667EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/11 10:15 p.m.4 views

CVE-2021-21310

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

6.1CVSS5.3AI score0.01667EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2021/02/11 9:40 p.m.66 views

CVE-2021-21310

NextAuth.js (next-auth) token verification vulnerability affects the Prisma database adapter when used with the Email provider (before 3.3.0). The defect: verification tokens were checked but not the associated email identifier, enabling sign-in as another user with a valid token. The issue is sp...

6.1CVSS5.6AI score0.01667EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/02/11 9:40 p.m.21 views

CVE-2021-21310 Token verification bug in next-auth

NextAuth.js next-auth is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the...

6.1CVSS6.3AI score0.01667EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/11 9:36 p.m.15 views

GHSA-PG53-56CG-4M8Q Token verification bug in next-auth

Impact Implementations using the Prisma database adapter with the Email provider are impacted. Implementations using the Prisma database adapter that are not using the Email provider are not impacted. Implementations using the default database adapter TypeORM with the Email provider are not...

6.1CVSS5.8AI score0.01667EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/02/11 9:36 p.m.55 views

Token verification bug in next-auth

Impact Implementations using the Prisma database adapter with the Email provider are impacted. Implementations using the Prisma database adapter that are not using the Email provider are not impacted. Implementations using the default database adapter TypeORM with the Email provider are not...

6.1CVSS0.9AI score0.01667EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/02/10 7:15 p.m.6 views

CVE-2021-27163

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele1234 credentials for an ISP...

9.8CVSS7.3AI score0.23633EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 7:15 p.m.5 views

CVE-2021-27161

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234 credentials for an ISP...

9.8CVSS7.3AI score0.17138EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 7:15 p.m.4 views

CVE-2021-27150

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded gestiontelebucaramanga / t3l3buc4r4m4ng42013 credentials for an ISP...

9.8CVSS7.3AI score0.2049EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 7:15 p.m.7 views

CVE-2021-27146

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadmin credentials for an ISP...

9.8CVSS7.3AI score0.2049EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 7:15 p.m.7 views

CVE-2021-27148

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP...

9.8CVSS7.3AI score0.23633EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 7:15 p.m.5 views

CVE-2021-27153

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / admintrue credentials for an ISP...

9.8CVSS7.3AI score0.2049EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 7:15 p.m.5 views

CVE-2021-27155

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJUh2VemEfUtesEchEC2d2e credentials for an ISP...

9.8CVSS5.8AI score0.2049EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/10 7:15 p.m.6 views

CVE-2021-27152

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded awnfibre / fibre@dm!n credentials for an ISP...

9.8CVSS7.3AI score0.23633EPSS
SaveExploits1References1
Rows per page
Query Builder