Lucene search
+L

1962 matches found

Cvelist
Cvelist
•added 2021/07/25 8:14 p.m.•37 views

CVE-2021-37439

NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...

6.7AI score0.01214EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/07/25 12:00 a.m.•19 views

NCH FlexiServer 路径遍历漏洞

NCH FlexiServer is a functional time and attendance software.NCH FlexiServer has a directory traversal vulnerability, which originates from the product's syslog?file=/... Failure to filter special characters, an attacker can use this vulnerability to obtain sensitive information...

6.5CVSS5.6AI score0.01214EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/25 12:00 a.m.•6 views

CVE-2021-37439: Improper Limitation of a Pathname to a Restricted Directory

NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...

6.5CVSS5.7AI score0.01214EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/21 3:15 p.m.•19 views

CVE-2020-21934

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...

7.5CVSS5.8AI score0.01562EPSS
SaveExploits1References2
NVD
NVD
•added 2021/07/21 3:15 p.m.•27 views

CVE-2020-21934

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...

7.5CVSS0.01562EPSS
SaveExploits1References2
Prion
Prion
•added 2021/07/21 3:15 p.m.•28 views

Authentication flaw

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...

5CVSS7.5AI score0.01562EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/07/21 1:24 p.m.•42 views

CVE-2020-21934

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...

7.6AI score0.01562EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/21 12:00 a.m.•6 views

CVE-2020-21934: Missing Authentication for Critical Function

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...

7.5CVSS5.8AI score0.01562EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/07/21 12:00 a.m.•15 views

Motorola CX2 授权问题漏洞

The Motorola CX2 is a wireless router from Motorola USA. An authorization issue vulnerability exists in the Motorola CX2 router CX, which stems from a lack of valid privilege validation for the Syslog download feature in the product. The following products and versions are affected: Motorola CX2...

7.5CVSS7.3AI score0.01562EPSS
SaveExploits1References3
OSV
OSV
•added 2021/07/16 11:15 a.m.•16 views

CVE-2021-21816

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

4.3CVSS7.3AI score0.32385EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/16 11:15 a.m.•43 views

CVE-2021-21816

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS0.32385EPSS
SaveExploits1References1
Prion
Prion
•added 2021/07/16 11:15 a.m.•32 views

Information disclosure

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

4.3CVSS4.3AI score0.32385EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/07/16 11:15 a.m.•10 views

CVE-2021-21816

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS6.6AI score0.32385EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/07/16 10:28 a.m.•48 views

CVE-2021-21816

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS4.9AI score0.32385EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/16 12:00 a.m.•5 views

CVE-2021-21816: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS5.8AI score0.32385EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/07/16 12:00 a.m.•15 views

PT-2021-14792 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-3040 version 1.13B03 Description: An information disclosure issue exists in the Syslog functionality. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to...

6.5CVSS5.1AI score0.32385EPSS
SaveExploits1References3
Talos
Talos
•added 2021/07/15 12:00 a.m.•143 views

D-LINK DIR-3040 Syslog information disclosure vulnerability

Talos Vulnerability Report TALOS-2021-1283 D-LINK DIR-3040 Syslog information disclosure vulnerability July 15, 2021 CVE Number CVE-2021-21818 Summary A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network...

7.5CVSS7.6AI score0.01691EPSS
SaveExploits2
Talos
Talos
•added 2021/07/15 12:00 a.m.•95 views

D-LINK DIR-3040 Syslog information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions D-LINK DIR-30...

6.5CVSS4.8AI score0.32385EPSS
SaveExploits1
Imperva Blog
Imperva Blog
•added 2021/07/07 11:09 a.m.•225 views

Oracle Auditing Part 2: Mandatory and Fine-Grained Auditing

This is the second of three articles on the topic of Oracle auditing. It is relevant to Oracle 10g, 11g, and 12c, although Unified Auditing in 12c makes some of this content irrelevant if you choose to use Pure Unified Auditing. Unified Auditing will be covered in the third part of this series an...

7.4AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2021/06/29 1:58 p.m.•22 views

rsyslog bug fix and enhancement update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Bug Fixes and Enhancements: rsyslog fails to execute actions due to having a too lar...

2.4AI score
SaveExploits0
Rows per page
Query Builder