Lucene search
+L

4045 matches found

Cvelist
Cvelist
•added 2019/12/19 6:17 p.m.•51 views

CVE-2019-18181

In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only...

7.6AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/19 1:15 a.m.•18 views

CVE-2019-7484

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

6.5CVSS6.8AI score0.00845EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/19 12:00 a.m.•7 views

CVE-2019-18181: Undefined Security Weakness

In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only...

7.8CVSS7.3AI score0.0034EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/12/19 12:00 a.m.•3 views

PT-2019-18625

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.3 and earlier Description The issue allows for authenticated SQL injection, enabling users to gain read-only access to unauthorized resources. This is achieved through the use of the viewcacert CGI script...

6.5CVSS0.00845EPSS
SaveExploits1References3
CNVD
CNVD
•added 2019/12/18 12:00 a.m.•20 views

Unspecified Vulnerability in Barco ClickShare Button R9861500D01

The Barco ClickShare Button R9861500D01 is a wireless control device for presentation systems from Barco Belgium. A security vulnerability exists in the Barco ClickShare Button R9861500D01 with firmware prior to version 1.9.0, which can be exploited by an attacker to control the execution of ROM...

5.9CVSS6.9AI score0.01353EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/18 12:00 a.m.•16 views

SonicWall SMA100 Elevation of Privilege Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. An information disclosure vulnerability exists in SonicWall SMA100 9.0.0.3 and earlier versions. An attacker can exploit the vulnerability to gain read-only access to unauthorized resources...

7.5CVSS8.9AI score0.99906EPSS
SaveExploits1References1
NVD
NVD
•added 2019/12/17 11:15 p.m.•35 views

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

7.5CVSS7.7AI score0.99906EPSS
SaveExploits1References2
OSV
OSV
•added 2019/12/17 11:15 p.m.•15 views

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

7.5CVSS7.4AI score0.99906EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/12/17 10:25 p.m.•49 views

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

7.7AI score0.99906EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2019/12/17 10:25 p.m.•11 views

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

7.8AI score0.99906EPSS
SaveExploits1References1
SonicWall
SonicWall
•added 2019/12/17 10:00 p.m.•27 views

SonicWall SMA100 Authenticated SQL injection

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. CVE: CVE-2019-7484 Last updated: March 6, 2020, 4:42 a.m...

6.5CVSS8.2AI score0.00845EPSS
SaveExploits1
SonicWall
SonicWall
•added 2019/12/17 8:00 p.m.•34 views

SonicWall SMA100 Pre-Authentication SQL Injection

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. CVE: CVE-2019-7481 Last updated: March 6, 2020, 4:42 a.m...

7.5CVSS7.2AI score0.99906EPSS
SaveExploits1
attackerkb
attackerkb
•added 2019/12/17 12:00 a.m.•47 views

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS5.3AI score0.99906EPSS
SaveIn wildExploits1References2
Positive Technologies
Positive Technologies
•added 2019/12/17 12:00 a.m.•12 views

PT-2019-6079

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.3 and earlier Description The issue allows an unauthenticated user to gain read-only access to unauthorized resources. It is related to a lack of protection measures for the SQL query structure, which can be...

7.5CVSS7.3AI score0.99906EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/17 12:00 a.m.•2 views

CVE-2019-7481: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

7.5CVSS7.6AI score0.99906EPSS
SaveExploits1References4
OSV
OSV
•added 2019/12/16 5:15 p.m.•12 views

CVE-2019-18827

On Barco ClickShare Button R9861500D01 devices before firmware version 1.9.0 JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware...

5.9CVSS6.3AI score0.01353EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2019/12/09 11:30 a.m.•235 views

CAINE 11 - GNU/Linux Live Distribution For Digital Forensics Project, Windows Side Forensics And Incident Response

CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a Digital Forensics project. Currently, the project manager is Nanni Bassetti Bari - Italy. CAINE offers a complete forensic environment that is organized to integrate existing software tools as...

7.4AI score
SaveExploits0
Arista
Arista
•added 2019/12/04 12:00 a.m.•56 views

Security Advisory 0044

Security Advisory 0044 PDF Date: December 4th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 4, 2019 | Initial Release The CVE-ID tracking this issue is: CVE-2019-18181 CVSSv3 Base Score: 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Description: This advisory document...

7.8CVSS7.9AI score0.0034EPSS
SaveExploits0
OSV
OSV
•added 2019/11/26 4:15 p.m.•15 views

CVE-2017-7399

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users...

8.8CVSS5.8AI score0.00861EPSS
SaveExploits0References1
Mend
Mend
•added 2019/11/26 1:58 p.m.•2 views

CVE-2015-7831

In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...

8.8CVSS0.01078EPSS
SaveExploits0References1
Rows per page
Query Builder