Lucene search
+L

167 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/03 12:00 a.m.•6 views

CVE-2020-3222: Undefined Security Weakness

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass access control restrictions on an affected device. The vulnerability is due to the presence of a proxy service at a specific endpoint of the web UI. An...

4.3CVSS5.9AI score0.00442EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/05/22 12:00 a.m.•29 views

Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.1.12 / 8.1.x < 8.1.12 / 9.0.x < 9.0.6 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.1.12 or 8.1.x prior to 8.1.12 or 9.0.x prior to 9.0.6. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability in Palo Alto Networks PAN-OS Panorama pro...

9.3CVSS8.4AI score0.01358EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/03/27 12:00 a.m.•7 views

Huawei Desktop Cloud Windows Virtual Desktop Proxy Service hdpCommunication application suffers from denial of service vulnerability

Founded in 1987, Huawei Technologies Co. Ltd. is a global provider of ICT information and communications infrastructure and smart terminals. A denial-of-service vulnerability exists in the hdpCommunication application of Huawei Desktop Cloud's Windows virtual desktop proxy service. An unauthorize...

6.8AI score
SaveExploits0
Prion
Prion
•added 2019/12/02 5:15 p.m.•19 views

Code injection

An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service which is typically exposed to all users allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy without password authentication, an attacker is able to fully...

10CVSS9.7AI score0.03313EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2019/12/02 5:15 p.m.•8 views

CVE-2019-19015

An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service which is typically exposed to all users allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy without password authentication, an attacker is able to fully...

10CVSS5.7AI score0.03313EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/02 12:00 a.m.•3 views

CVE-2019-19015: Exposure of Resource to Wrong Sphere

An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service which is typically exposed to all users allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy without password authentication, an attacker is able to fully...

10CVSS8.4AI score0.03313EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/12/04 12:00 a.m.•12 views

Brocade Fabric OS proxy service information disclosure and denial of service vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade Communications Systems USA. proxy service is one of the proxy service components. An information disclosure and denial of service vulnerability exists in the proxy service in...

9.1CVSS8.5AI score0.02182EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/12/03 10:00 p.m.•33 views

CVE-2018-6440

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack...

9.2AI score0.02182EPSS
SaveExploits0References1
CVE
CVE
•added 2018/12/03 10:00 p.m.•70 views

CVE-2018-6440

CVE-2018-6440 maps to a Brocade Fabric OS proxy service vulnerability. Affects Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, and 7.4.2d where the proxy service could leak sensitive information and potentially allow a remote unauthenticated attacker to cause a denial-of-service. IBM’s advisory ...

9.1CVSS8.4AI score0.02182EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/12/03 9:29 p.m.•25 views

CVE-2018-6440

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack...

9.1CVSS9.2AI score0.02182EPSS
SaveExploits0References1
OSV
OSV
•added 2018/12/03 9:29 p.m.•16 views

CVE-2018-6440

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack...

9.1CVSS5.8AI score0.02182EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/03 12:00 a.m.•6 views

CVE-2018-6440: Undefined Security Weakness

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack...

9.1CVSS7.7AI score0.02182EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/12/03 12:00 a.m.•0 views

PT-2018-17553

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d Description A vulnerability in the proxy service could allow remote...

9.1CVSS0.02182EPSS
SaveExploits0References3
Broadcom
Broadcom
•added 2018/10/29 12:00 a.m.•20 views

BSA-2018-733

Security Advisory ID : BSA-2018-733 Component : Fabric OS Proxy Service Revision : 1.0: Initial A vulnerability in the proxy service of Brocade Fabric OS versions could allow remote unauthenticated attackersto obtain sensitive information and possibly cause a denial of service. Affected Products...

9.1CVSS6.9AI score0.02182EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2017/11/14 8:00 a.m.•100 views

November 14, 2017—KB4048953 (OS Build 14393.1884)

None None...

9.3CVSS6.8AI score0.69802EPSS
SaveExploits39
Hacker One
Hacker One
•added 2017/09/28 5:44 p.m.•24 views

██████: Remote Code Execution on Proxy Service (as root)

The proxy service used to provide researchers with access to certain programs on ██████ allows access to AWS's Metadata API. This Metadata API in turn is configured to expose temporary AWS access credentials for the AWS EC2 Run Command role. When this role is assumed by an AWS client e.g. the CLI...

1.4AI score
SaveExploits0
NVD
NVD
•added 2017/09/03 7:29 p.m.•32 views

CVE-2017-14117

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01...

5.9CVSS6AI score0.08024EPSS
SaveExploits2References3
Prion
Prion
•added 2017/09/03 7:29 p.m.•25 views

Code injection

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01...

4.3CVSS6AI score0.08024EPSS
SaveExploits2References3Affected Software1
OpenVAS
OpenVAS
•added 2017/04/13 12:00 a.m.•57 views

Juniper Networks Junos OS Multiple BIND Vulnerabilities (JSA10785)

Junos OS is prone to multiple denial of service vulnerabilities in ISC BIND named. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS7.5AI score0.89482EPSS
SaveExploits7References1
CNVD
CNVD
•added 2016/07/27 12:00 a.m.•6 views

Google Chrome PAC Feature Information Disclosure Vulnerability

Google Chrome is a web browsing tool developed by Google. An information disclosure vulnerability exists in Google Chrome prior to version 52.0.2743.82, where the PAC function net/proxy/proxyservice.cc does not ensure that URL information is restricted to a certain scheme, host, and port. A remot...

8.8CVSS8.5AI score0.0152EPSS
SaveExploits0References1
Rows per page
Query Builder