Lucene search
+L

2923 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/22 12:00 a.m.•2 views

CVE-2014-6310: Buffer Copy without Checking Size of Input

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

9.8CVSS8.8AI score0.04706EPSS
SaveExploits0References2
NVD
NVD
•added 2019/11/21 4:15 p.m.•36 views

CVE-2019-5509

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...

9.8CVSS9.5AI score0.02275EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/21 4:15 p.m.•12 views

CVE-2019-5509

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...

9.8CVSS7.4AI score0.02275EPSS
SaveExploits0References1
NVD
NVD
•added 2019/11/21 4:15 p.m.•32 views

CVE-2019-17272

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges...

7.2CVSS7.1AI score0.01262EPSS
SaveExploits0References1
Prion
Prion
•added 2019/11/21 4:15 p.m.•27 views

Code injection

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges...

6.5CVSS7AI score0.01262EPSS
SaveExploits0References1
Prion
Prion
•added 2019/11/21 4:15 p.m.•34 views

Code injection

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...

7.5CVSS9.3AI score0.02275EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/11/21 3:40 p.m.•84 views

CVE-2019-17272

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and CVE records.

7.2CVSS7AI score0.01262EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/11/21 3:40 p.m.•41 views

CVE-2019-17272

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges...

7.1AI score0.01262EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/11/21 3:33 p.m.•36 views

CVE-2019-5509

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...

9.5AI score0.02275EPSS
SaveExploits0References1
CVE
CVE
•added 2019/11/21 3:33 p.m.•85 views

CVE-2019-5509

CVE-2019-5509 affects ONTAP Select Deploy administration utility versions 2.11.2–2.12.2 and describes a code injection vulnerability that could let an unauthenticated remote attacker enable and use a privileged user account. Multiple connected sources (Red Hat advisory, CNVD, CVE records) corrobo...

9.8CVSS9.4AI score0.02275EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/21 12:00 a.m.•2 views

CVE-2019-17272: Undefined Security Weakness

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges...

7.2CVSS7.2AI score0.01262EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/21 12:00 a.m.•5 views

CVE-2019-5509: Improper Control of Generation of Code

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account...

9.8CVSS8.2AI score0.02275EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/11/08 12:00 a.m.•12 views

Portainer Cross-Site Scripting Vulnerability (CNVD-2019-40484)

Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. A stored cross-site scripting vulnerability exists in the isteven-multi-select component in Portainer versions prior to 1.22.1. An attacker can exploit this vulnerability to inject...

5.4CVSS6.2AI score0.00521EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2019/10/23 9:08 p.m.•119 views

Slither v0.6.7 - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

7.6AI score
SaveExploits0References65
Exploit DB
Exploit DB
•added 2019/10/17 12:00 a.m.•311 views

WordPress Plugin FooGallery 1.8.12 - Persistent Cross-Site Scripting

Exploit Title: Wordpress FooGallery 1.8.12 - Persistent Cross-Site Scripting Google Dork: inurl:"\wp-content\plugins\foogallery" Date: 2019-06-13 Exploit Author: Unk9vvN Vendor Homepage: https://foo.gallery/ Software Link: https://wordpress.org/plugins/foogallery/ Version: 1.8.12 Tested on: Kali...

5.3AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/25 12:00 a.m.•22 views

NetApp ONTAP Select Deploy Remote Command Execution Vulnerability

ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. A remote command execution vulnerability exists in ONTAP Select Deploy 2.12, 2.12.1. An attacker could exploit this vulnerability to perform administrative operations...

9.8CVSS7.2AI score0.01973EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/09/25 12:00 a.m.•15 views

NetApp ONTAP Select Deploy Information Disclosure Vulnerability (CNVD-2019-43849)

ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. An information disclosure vulnerability exists in ONTAP Select Deploy. The vulnerability stems from the product transmitting credentials in plain text. An attacker could exploit this vulnerability to...

9.8CVSS6.3AI score0.00836EPSS
SaveExploits0References1
OSV
OSV
•added 2019/09/24 8:15 p.m.•17 views

CVE-2019-5504

ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...

9.8CVSS7.4AI score0.01973EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/24 8:15 p.m.•30 views

CVE-2019-5505

ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...

9.8CVSS9.5AI score0.00836EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/24 8:15 p.m.•31 views

CVE-2019-5504

ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...

9.8CVSS9.6AI score0.01973EPSS
SaveExploits0References1
Rows per page
Query Builder