Lucene search
+L

1828 matches found

CNNVD
CNNVD
•added 2021/04/15 12:00 a.m.•24 views

McAfee Content Security Reporter security vulnerability

McAfee Content Security Reporter is an application from McAfee, Inc. A reporting software solution that helps you identify and analyze a variety of data collected from network devices. A security vulnerability exists in McAfee Content Security Reporter CSR prior to version 2.8.0, which stems from...

4.3CVSS5.6AI score0.00213EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/15 12:00 a.m.•37 views

CVE-2021-23884: Cleartext Transmission of Sensitive Information

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter CSR prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway MWG or the password of the McAfee Web Gateway Cloud Server MWGCS read on...

4.3CVSS5.9AI score0.00213EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/04/06 12:00 a.m.•56 views

Fedora: Security Advisory for mediaconch (FEDORA-2021-3b67623d93)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02868EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2021/04/05 12:00 a.m.•75 views

Micro Focus Operations Bridge Reporter Remote Code Execution (CVE-2021-22502)

A remote code execution vulnerability exists in Micro Focus Operations Bridge Reporter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS5.3AI score0.9674EPSS
SaveExploits4
Symantec
Symantec
•added 2021/03/09 7:16 p.m.•148 views

OpenSSL Vulnerabilities Sep 2020 - Feb 2021

Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A remote attacker may be able to decrypt encrypted communication from an SSL/TLS connection, downgrade a newly established SSL/TLS connection to SSLv2,...

5CVSS6.4AI score0.50732EPSS
SaveExploits3Affected Software16
CNVD
CNVD
•added 2021/03/03 12:00 a.m.•20 views

Sytech XL Reporter Elevation of Privilege Vulnerability

Sytech XL Reporter is a software application from Sytech Corporation. It provides all the powerful features of Excel such as charting, formatting and formulas, as well as XLReporter's industry-specific features to generate excellent reports. A local elevation of privilege vulnerability exists in...

8.8CVSS7.5AI score0.00465EPSS
SaveExploits1References1
NVD
NVD
•added 2021/02/19 5:15 p.m.•37 views

CVE-2020-13549

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or...

8.8CVSS0.00465EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/02/19 5:15 p.m.•24 views

CVE-2020-13549

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or...

7.8CVSS6AI score0.00465EPSS
SaveExploits1References1
Prion
Prion
•added 2021/02/19 5:15 p.m.•25 views

Privilege escalation

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or...

7.2CVSS7.9AI score0.00465EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/02/19 4:54 p.m.•46 views

CVE-2020-13549

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or...

8.8CVSS7.9AI score0.00465EPSS
SaveExploits1References1
CVE
CVE
•added 2021/02/19 4:54 p.m.•70 views

CVE-2020-13549

CVE-2020-13549 affects Sytech XL Reporter v14.0.1. A local privilege escalation exists due to insecure file-system permissions in the XLReporter install directory, allowing an attacker to overwrite the runtime/service binary (e.g., XLRiRuntime.exe) or other files and execute code with the service...

8.8CVSS7.8AI score0.00465EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/19 12:00 a.m.•9 views

CVE-2020-13549: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or...

8.8CVSS6.4AI score0.00465EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/02/19 12:00 a.m.•21 views

Sytech XL Reporter: Permissions and access control issues

Sytech XL Reporter is a software application from Sytech Corporation. It provides all the powerful features of Excel such as charting, formatting and formulas, as well as XLReporter's industry-specific features to generate excellent reports. A local elevation of privilege vulnerability exists in...

8.8CVSS7.5AI score0.00465EPSS
SaveExploits1References2
Talos
Talos
•added 2021/02/19 12:00 a.m.•88 views

Sytech XL reporter installation privilege escalation vulnerability

Summary An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the...

8.8CVSS8.3AI score0.00465EPSS
SaveExploits1
Metasploit
Metasploit
•added 2021/02/09 12:00 a.m.•102 views

Micro Focus Operations Bridge Reporter Unauthenticated Command Injection

This module exploits a command injection vulnerability on login yes, you read that right that affects Micro Focus Operations Bridge Reporter on Linux, versions 10.40 and below. It's a straight up command injection, with little escaping required and it works before authentication. This module has...

10CVSS8.7AI score0.9674EPSS
SaveExploits4
CNVD
CNVD
•added 2021/02/09 12:00 a.m.•39 views

Micro Focus Operations Bridge Reporter Remote Code Execution Vulnerability

Micro Focus Operations Bridge Reporter OBR is an IT reporting software that provides resource, event, and response time reports across server, network, and application environments. A remote code execution vulnerability exists in Micro Focus Operations Bridge Reporter version 10.40. An attacker...

10CVSS7.8AI score0.9674EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/09 12:00 a.m.•67 views

Micro Focus Operations Bridge Reporter userName Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Reporter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the userName parameter provided to the...

9.8CVSS2.7AI score0.9674EPSS
SaveExploits4References1
NVD
NVD
•added 2021/02/08 10:15 p.m.•39 views

CVE-2021-22502

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter OBR product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server...

10CVSS0.9674EPSS
SaveExploits4References5
osv_cve
osv_cve
•added 2021/02/08 10:15 p.m.•17 views

CVE-2021-22502

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter OBR product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server...

9.8CVSS6AI score0.9674EPSS
SaveExploits4References5
Vulnrichment
Vulnrichment
•added 2021/02/08 9:12 p.m.•15 views

CVE-2021-22502

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter OBR product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server...

9.8AI score0.9674EPSS
SaveExploits4References4
Rows per page
Query Builder