Lucene search
+L

12497 matches found

ATTACKERKB
ATTACKERKB
added 2021/06/30 11:15 a.m.5 views

CVE-2021-30648

The Symantec Advanced Secure Gateway ASG and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance...

9.8CVSS7.2AI score0.01447EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/06/30 10:40 a.m.37 views

CVE-2021-30648

The Symantec Advanced Secure Gateway ASG and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance...

10AI score0.01447EPSS
SaveExploits0References1
CVE
CVE
added 2021/06/30 10:40 a.m.58 views

CVE-2021-30648

CVE-2021-30648 affects Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles, enabling an unauthenticated authentication bypass that allows arbitrary CLI commands, viewing/modifying appliance configuration and policy, and shutdown/restart. Affected products: ASG and ProxySG. ...

9.8CVSS9.9AI score0.01447EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/06/29 7:15 p.m.16 views

Default configuration

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used which is recommended, but is n...

3.5CVSS4AI score0.00262EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/06/29 6:15 p.m.35 views

CVE-2021-29480 Default client side session signing key is highly predictable

Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used which is recommended, but is n...

4.4CVSS4.9AI score0.00262EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2021/06/28 9:49 p.m.61 views

CVE-2021-25321

A UNIX Symbolic Link Symlink Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon th...

7.8CVSS3.7AI score0.00441EPSS
SaveExploits1References3
Prion
Prion
added 2021/06/25 7:15 p.m.18 views

Authentication flaw

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

7.8CVSS7.5AI score0.01493EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/25 6:26 p.m.21 views

CVE-2021-33541 Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

7.5CVSS7.7AI score0.01493EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/06/21 12:0 a.m.30 views

NTP < 4.2.8p5 DoS Vulnerability

If ntpd is always started with the -g option, which is common and against long-standing recommendation, and if at the moment ntpd is restarted an attacker can immediately respond to enough requests from enough sources trusted by the target, which is difficult and not common, there is a window of...

7.5CVSS8.7AI score0.0913EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/15 5:46 p.m.32 views

Security Bulletin: Vulnerability in IBM Java SDK affecting IBM Application Discovery and Delivery Intelligence V5.1.0.8, V5.1.0.9 and V6.0.0.0

Summary Vulnerability was identified in IBM® SDK Java™ Technology Edition Version 1.8 that is used by IBM Application Discovery and Delivery Intelligence V5.1.0.8, V5.1.0.9 and V6.0.0.0 respectively. This issue was disclosed in the Oracle April 2021 Critical Patch Update. Vulnerability Details...

5.9CVSS1.2AI score0.03125EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2021/06/10 12:15 p.m.7 views

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

7.2CVSS5.8AI score0.00879EPSS
SaveExploits0References1
Microsoft Security Update
Microsoft Security Update
added 2021/06/09 5:0 p.m.13 views

2021-06 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB5003635)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/06/09 5:0 p.m.23 views

2021-06 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5003646)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
Cvelist
Cvelist
added 2021/06/09 1:30 p.m.21 views

CVE-2021-27639

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS5.7AI score0.00561EPSS
SaveExploits0References2
Citrix
Citrix
added 2021/06/09 12:0 a.m.9 views

Citrix Hypervisor 8.2 : xe-toolstack-restart causes the PVS VMs to go into PowerState Unknown.

PVS VMs may showPowerState Unknown inCitrix Studio when the toolstack is restarted on the XenServer Hypervisor hosting the VMs. Currently logged in sessions will be unaffected however any new user trying to log may encounter an error as the site is unable to determine if any VMs are powered on an...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2012:0674-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.1AI score0.48298EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2012:0084-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8AI score0.17687EPSS
SaveExploits0References2
Microsoft Security Update
Microsoft Security Update
added 2021/06/08 5:7 p.m.19 views

2021-06 Cumulative Update for Microsoft server operating system version 21H2 for x64-basedSystems (KB5003645)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

3.6AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/06/08 5:0 p.m.23 views

2021-06 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5003637)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/06/08 5:0 p.m.47 views

2021-06 Dynamic Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5003637)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

6.7AI score
SaveExploits0
Rows per page
Query Builder