Lucene search
+L

167 matches found

attackerkb
attackerkb
added 2020/12/15 5:00 p.m.8 views

CVE-2020-27147

The REST API component of TIBCO Software Inc.'s TIBCO PartnerExpress contains a vulnerability that theoretically allows an unauthenticated attacker with network access to obtain an authenticated login URL for the affected system via a REST API. Affected releases are TIBCO Software Inc.'s TIBCO...

6.5CVSS5.4AI score0.00753EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/01/08 12:00 a.m.29 views

WordPress 5.0.x < 5.0.8 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Two cross-site scripting XSS vulnerabilities exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these, by convincing ...

6.1CVSS6.5AI score0.02762EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2020/01/02 6:39 p.m.39 views

CVE-2010-3782

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation...

8.8CVSS8.7AI score0.01091EPSS
SaveExploits0
NVD
NVD
added 2019/10/31 5:15 p.m.28 views

CVE-2019-18464

In Progress MOVEit Transfer 10.2 before 10.2.6 2018.3, 11.0 before 11.0.4 2019.0.4, and 11.1 before 11.1.3 2019.1.3, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the database. Depending on the...

9.8CVSS10AI score0.0195EPSS
SaveExploits0References4
OSV
OSV
added 2019/08/28 7:15 p.m.14 views

CVE-2019-12643

A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by the area of code that manages the REST...

10CVSS7.4AI score0.05324EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/04 8:15 p.m.12 views

CVE-2019-1889

A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller APIC Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete validation and error checki...

7.2CVSS7.1AI score0.02818EPSS
SaveExploits0References1
NVD
NVD
added 2018/05/02 10:29 p.m.36 views

CVE-2018-0245

A vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking...

5.3CVSS5.3AI score0.02278EPSS
SaveExploits0References3
Rows per page
Query Builder