Lucene search
+L

2036 matches found

Positive Technologies
Positive Technologies
added 2020/01/24 12:0 a.m.8 views

PT-2021-2514 · Node.Js +8 · Node.Js +8

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 10.24.0 Node.js versions prior to 12.21.0 Node.js versions prior to 14.16.0 Node.js versions prior to 15.10.0 Description: The issue is related to the presence of localhost6 in the whitelist, which can be exploited b...

9.8CVSS6.7AI score0.81464EPSS
SaveExploits31References263
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.26 views

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2018-1079)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.02923EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-1081)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.5962EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:0 a.m.4 views

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 allows a attacker to perform a DNS Rebinding attack.

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 router is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to carry out a DNS Rebinding attack remotely...

8.3CVSS7.7AI score0.04287EPSS
SaveExploits1References5
OSV
OSV
added 2020/01/08 6:15 p.m.6 views

CVE-2019-19495

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...

9.8CVSS7.3AI score0.04287EPSS
SaveExploits1References3
NVD
NVD
added 2020/01/08 6:15 p.m.17 views

CVE-2019-19495

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...

10CVSS9.4AI score0.04287EPSS
SaveExploits1References3
Prion
Prion
added 2020/01/08 6:15 p.m.22 views

Code injection

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...

10CVSS9.2AI score0.04287EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2020/01/08 5:5 p.m.63 views

CVE-2019-19495

The CVE-2019-19495 entry concerns the Technicolor TC7230 STEB 01.25 web interface. It describes a DNS rebinding vulnerability that allows a remote attacker, via JavaScript in a victim’s browser, to reconfigure the cable modem and enable port-forwarding of the internal TELNET server, potentially g...

10CVSS9.2AI score0.04287EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/01/08 5:5 p.m.25 views

CVE-2019-19495

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...

9.4AI score0.04287EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/01/07 12:0 a.m.5 views

GitLab Code Issue Vulnerability (CNVD-2020-03032)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A code issue vulnerability exists in GitLab Enterprise...

8.8CVSS7AI score0.0102EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/06 12:0 a.m.3 views

OpenLambda has an unspecified vulnerability

OpenLambda is an open source serverless computing platform written in the Go language. A security vulnerability exists in the 2019-09-10 release of OpenLambda. An attacker can exploit the vulnerability to perform a DNS rebinding attack on OL servers...

8.1CVSS6.8AI score0.00608EPSS
SaveExploits1References1
NVD
NVD
added 2020/01/03 12:15 a.m.22 views

CVE-2019-20329

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...

8.1CVSS8.2AI score0.00608EPSS
SaveExploits1References3
OSV
OSV
added 2020/01/03 12:15 a.m.4 views

CVE-2019-20329

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...

8.1CVSS5.8AI score0.00608EPSS
SaveExploits1References3
Prion
Prion
added 2020/01/03 12:15 a.m.20 views

Code injection

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...

5.8CVSS8.1AI score0.00608EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/01/02 11:51 p.m.24 views

CVE-2019-20329

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000...

8.2AI score0.00608EPSS
SaveExploits1References3
CVE
CVE
added 2020/01/02 11:51 p.m.94 views

CVE-2019-20329

OpenLambda (release 2019-09-10) contains a DNS rebinding vulnerability affecting the OL server hosting the REST API on TCP port 5000. The issue enables potential DNS rebinding attacks against the server as described in multiple sources linked to CVE-2019-20329. The concrete impact and available f...

8.1CVSS8AI score0.00608EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/31 12:0 a.m.50 views

F5 Networks BIG-IP : NodeJS vulnerability (K63025104)

The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the...

8.8CVSS7.6AI score0.09916EPSS
SaveExploits0References2
NVD
NVD
added 2019/11/15 9:15 p.m.32 views

CVE-2019-6663

The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerable to Anti DNS Pinning DNS Rebinding attack...

5.5CVSS5.5AI score0.00649EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/15 9:15 p.m.26 views

CVE-2019-6663

The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerable to Anti DNS Pinning DNS Rebinding attack...

5.5CVSS6.8AI score0.00649EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/15 9:15 p.m.26 views

Code injection

The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerable to Anti DNS Pinning DNS Rebinding attack...

4.3CVSS5.5AI score0.00649EPSS
SaveExploits0References1Affected Software16
Rows per page
Query Builder