Lucene search
+L

5063 matches found

CVE
CVE
added 2020/10/07 4:56 p.m.90 views

CVE-2020-26876

CVE-2020-26876 – WordPress WP Courses Plugin up to version 2.0.27/2.0.29 suffers an information-disclosure via the REST API. The issue stems from show_in_rest being enabled for custom post types, allowing access to private course videos and materials through endpoints like /wp-json/wp/v2/course o...

7.5CVSS7.5AI score0.10551EPSS
SaveExploits1References3Affected Software1
Cisco
Cisco
added 2020/10/07 4:0 p.m.60 views

Cisco Industrial Network Director Denial of Service Vulnerability

A vulnerability in the management REST API of Cisco Industrial Network Director IND could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting in a denial of service DoS condition on an affected device. The vulnerability is due to insufficient...

6.5CVSS1.8AI score0.01154EPSS
SaveExploits0References1
Lenovo
Lenovo
added 2020/10/07 3:1 a.m.20 views

Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US

No description provided...

9.8CVSS9.5AI score0.02248EPSS
SaveExploits0
NVD
NVD
added 2020/10/06 6:15 p.m.30 views

CVE-2019-4325

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

5.3CVSS0.00542EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/06 6:15 p.m.23 views

Design/Logic Flaw

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

5CVSS5.3AI score0.00542EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/06 5:18 p.m.33 views

CVE-2019-4325

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

5.3AI score0.00542EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/06 5:18 p.m.61 views

CVE-2019-4325

CVE-2019-4325 affects HCL AppScan Enterprise; root cause is the use of broken or risky cryptographic algorithms to store REST API user details. Impact and remediation details are not explicitly provided in the connected documents; refer to the CVE entry for basic score context (MEDIUM) and the ve...

5.3CVSS5.3AI score0.00542EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/10/01 11:0 p.m.4 views

CVE-2020-24404

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization...

5.5CVSS4.7AI score0.0156EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2020/09/28 12:0 a.m.20 views

WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure

The plugin does not protect the courses which could be accessed by unauthenticated users using the REST API /wp-jon/ endpoints. This could result in attackers accessing paying content without authorisation...

5CVSS3.9AI score0.10551EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2020/09/27 12:0 a.m.39 views

Brocade Fabric OS Buffer Overflow Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade in the United States. A buffer overflow vulnerability exists in the REST API in Brocade Fabric OS. A remote, unauthenticated attacker could exploit this vulnerability to perform ...

9.8CVSS7.2AI score0.02367EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/25 2:15 p.m.8 views

CVE-2020-15373

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

9.8CVSS7.6AI score0.02367EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/25 2:15 p.m.28 views

CVE-2020-15373

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

9.8CVSS0.02367EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/25 2:15 p.m.18 views

CVE-2020-15374

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

9.8CVSS0.01224EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/25 2:15 p.m.13 views

Buffer overflow

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

7.5CVSS9.7AI score0.02367EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/09/25 2:15 p.m.14 views

Input validation

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

7.5CVSS9.3AI score0.01224EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/25 1:11 p.m.25 views

CVE-2020-15374

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

9.5AI score0.01224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/25 1:10 p.m.34 views

CVE-2020-15373

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

9.9AI score0.02367EPSS
SaveExploits0References1
CVE
CVE
added 2020/09/25 1:10 p.m.61 views

CVE-2020-15373

CVE-2020-15373 affects Brocade Fabric OS REST API; multiple buffer overflow vulnerabilities in v8.2.1–v8.2.1d and in 8.2.2 prior to 8.2.2c allow remote unauthenticated attackers to perform various attacks. Root cause: REST API buffer overflow. Impact is described as allowing varied attacks (no ex...

9.8CVSS9.8AI score0.02367EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2020/09/25 7:15 a.m.23 views

CVE-2020-15394

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution...

9.8CVSS0.07874EPSS
SaveExploits0References3
Prion
Prion
added 2020/09/25 7:15 a.m.21 views

Sql injection

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution...

7.5CVSS9.8AI score0.07874EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder