Lucene search
+L

316 matches found

CNVD
CNVD
•added 2022/05/07 12:00 a.m.•39 views

Secomea GateManager has an unspecified vulnerability

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerabilities exist in versions prior to Secomea GateManager 9.7, which could be exploited to allow logged-in users to write text entries in the audit log...

4.3CVSS4.6AI score0.00553EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•49 views

Secomea GateManager Insufficient Privilege Vulnerability

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from improper handling of permissions in Secomea GateManager's Web UI, and could be exploited to allow logged-in users to...

5.5CVSS4AI score0.005EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•25 views

Secomea GateManager Cross-Site Scripting Vulnerability (CNVD-2022-38151)

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerabilities exist in versions prior to Secomea GateManager 9.7, which can be exploited by attackers to inject javascript or html into a logged-in user session...

6.1CVSS2.6AI score0.00495EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•53 views

Secomea GateManager Insufficient Logging Vulnerability

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerabilities exist in versions prior to Secomea GateManager 9.7, which could be exploited by attackers to allow logged-in users to issue incorrect queries without being logged in...

4.3CVSS5.7AI score0.00625EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•41 views

Secomea GateManager Cross-Site Request Forgery Vulnerability

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerabilities exist in versions prior to Secomea GateManager 9.7, which can be exploited by attackers to issue get requests in a logged-in user session...

8.8CVSS4.9AI score0.0028EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•84 views

Secomea GateManager has an unspecified vulnerability (CNVD-2022-38146)

Secomea GateManager is a remote access server product from the Danish company Secomea.A security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from an unprotected alternate channel vulnerability in the debug console. An attacker could use this vulnerability to...

4.9CVSS4AI score0.00737EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•50 views

Secomea GateManager Information Disclosure Vulnerability (CNVD-2022-38149)

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from the exposure of information in Secomea GateManager's Web UI, and could be exploited by an attacker to allow logged-in...

4.3CVSS3.8AI score0.00625EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•26 views

Secomea SiteManager Cross-Site Scripting Vulnerability

Secomea SiteManager is an application from the Danish company Secomea. All versions of Secomea SiteManager prior to 9.7 have security vulnerabilities that could be exploited to allow injection of scripts by logged-in users...

9.1CVSS3.7AI score0.00611EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•37 views

Secomea GateManager Information Disclosure Vulnerability

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in all versions of Secomea GateManager prior to 9.7. The vulnerability stems from the exposure of query string information in GET requests of the LMM API, which could be exploited ...

7.5CVSS3.4AI score0.00242EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/04 2:15 p.m.•16 views

CVE-2022-25787

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...

6.7CVSS5.8AI score0.00242EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/04 2:15 p.m.•15 views

CVE-2022-25785

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7...

7.2CVSS6AI score0.01007EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/04 2:15 p.m.•25 views

CVE-2022-25782

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

5.5CVSS0.005EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/04 2:15 p.m.•23 views

CVE-2022-25784

Cross-site Scripting XSS vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7...

9.1CVSS0.00611EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/04 2:15 p.m.•12 views

CVE-2022-25781

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

6.1CVSS5.8AI score0.00495EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/04 2:15 p.m.•25 views

CVE-2022-25787

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...

7.5CVSS0.00242EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/04 2:15 p.m.•22 views

CVE-2022-25779

Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secomea GateManager versions prior to 9.7...

4.3CVSS0.00553EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/04 2:15 p.m.•32 views

CVE-2022-25783

Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7...

4.3CVSS0.00625EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/04 2:15 p.m.•31 views

CVE-2022-25778

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

8.8CVSS0.0028EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/04 2:15 p.m.•17 views

CVE-2022-25778

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

8.8CVSS7.3AI score0.0028EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/05/04 2:15 p.m.•6 views

CVE-2022-25781

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

6.1CVSS6.4AI score0.00495EPSS
SaveExploits0References2
Rows per page
Query Builder