Lucene search
+L

120 matches found

OSV
OSV
added 2019/08/22 1:15 p.m.2 views

DEBIAN-CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

7.5CVSS7.1AI score0.02059EPSS
SaveExploits1References1
OSV
OSV
added 2019/08/22 1:15 p.m.11 views

CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

7.5CVSS7.6AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2019/08/22 1:15 p.m.362 views

CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

7.5CVSS7AI score0.02059EPSS
SaveExploits1References3
OSV
OSV
added 2019/08/22 1:15 p.m.8 views

UBUNTU-CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

7.5CVSS5.8AI score0.02059EPSS
SaveExploits1References4
Prion
Prion
added 2019/08/22 1:15 p.m.22 views

Authentication flaw

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

5CVSS7.5AI score0.02059EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2019/08/22 12:26 p.m.47 views

CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

7.5AI score0.02059EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2019/08/22 12:26 p.m.106 views

CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

7.5CVSS7.6AI score0.02059EPSS
SaveExploits1
CVE
CVE
added 2019/08/22 12:26 p.m.104 views

CVE-2019-14511

CVE-2019-14511 affects Sphinx Technologies Sphinx up to version 3.1.1. By default, the service has no authentication and listens on 0.0.0.0, exposing it to the Internet unless firewall rules or a reconfiguration restrict it to 127.0.0.1. This creates reliance on network controls for exposure. Rel...

7.5CVSS7.4AI score0.02059EPSS
SaveExploits1References6Affected Software1
Hacker One
Hacker One
added 2019/06/17 10:31 p.m.127 views

Collibra: Access to the database on onboarding.collibra.com

Summary: During the study, it was discovered that port 9306 was open on this server, which is open to the Sphinx service. I was able to connect to the internal database. Steps To Reproduce: 1. Discovery of open port 9306, on which service Sphinx is running screenshot 0 2. Connection to the databa...

0.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/04/13 12:00 a.m.118 views

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2018:0934-1)

This update for python3 fixes the following issues: Security issue fixed : - CVE-2017-18207: Fixed possible denial of service vulnerability by adding a check to Lib/wave.py that verifies that at least one channel is provided bsc1083507. Bug fixes : - Require python-Sphinx-latex for building on Le...

6.5CVSS6.8AI score0.01323EPSS
SaveExploits0References4
n0where
n0where
added 2018/03/05 4:06 p.m.29 views

Fuzzing and Data Manipulation Framework: Fuddly

Among the variety of complementary approaches used in the security evaluation of a target e.g. , software, an embedded equipment, etc. , fuzz testing—abbreviated fuzzing —is widely recognized as an effective means to help discovering security weaknesses in a target. Fuzzing is a software testing...

7.5AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2017/07/17 12:00 a.m.41 views

Fedora 26 : 3:mariadb (2017-09dd8907da)

Rebase to 10.1.24 Plugin oqgraph enabled Plugin jemalloc enabled Sphinx engine enabled Build dependecies Bison and Libarchive added, others corrected Disabling Mroonga engine for i686 architecture, as it is not supported by MariaDB Removed patches: fixed by upstream Patch5:...

7.7CVSS6.5AI score0.04792EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2016/10/20 2:30 p.m.35 views

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

7.5AI score
SaveExploits0References8
OpenVAS
OpenVAS
added 2015/08/31 12:00 a.m.86 views

Sphinx search server Detection

The script checks the presence of a Sphinx search server and sets the version in the kb. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

7AI score
SaveExploits0
Fedora
Fedora
added 2014/07/26 12:11 a.m.27 views

[SECURITY] Fedora 20 Update: sphinxtrain-1.0.8-13.fc20

SphinxTrain is Carnegie Mellon University's open source acoustic model trainer. It contains the scripts and instructions necessary for building models for the CMU Sphinx Recognizer...

2.9CVSS2.9AI score0.01457EPSS
SaveExploits1
NVD
NVD
added 2012/02/07 9:55 p.m.23 views

CVE-2012-1005

Multiple cross-site scripting XSS vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using 1 Blog/MyFirstBlog.txt or 2 Blog/AboutSomething.txt...

4.3CVSS5.8AI score0.01624EPSS
SaveExploits1References4
Prion
Prion
added 2012/02/07 9:55 p.m.15 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using 1 Blog/MyFirstBlog.txt or 2 Blog/AboutSomething.txt...

4.3CVSS6AI score0.01624EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2012/02/07 9:00 p.m.27 views

CVE-2012-1005

Multiple cross-site scripting XSS vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using 1 Blog/MyFirstBlog.txt or 2 Blog/AboutSomething.txt...

5.8AI score0.01624EPSS
SaveExploits1References4
CVE
CVE
added 2012/02/07 9:00 p.m.48 views

CVE-2012-1005

CVE-2012-1005 affects Sphinx Mobile Web Server

4.3CVSS5.9AI score0.01624EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2009/04/09 12:00 a.m.29 views

Mandriva Update for mysql MDVSA-2008:028 (mysql)

Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2008:028 mysql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6CVSS0.0296EPSS
SaveExploits2References2
Rows per page
Query Builder