Lucene search
+L

5400 matches found

OSV
OSV
added 2021/02/12 12:15 a.m.5 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.03554EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/12 12:15 a.m.21 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.03554EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/02/11 11:35 p.m.30 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.1AI score0.03554EPSS
SaveExploits0References2
Circl
Circl
added 2021/02/11 8:42 p.m.9 views

CVE-2021-22881

creationtimestamp| type| source ---|---|--- 2021-02-11 20:42:39+00:00| seen| https://t.me/cibsecurity/23449 2026-01-21 08:13:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-22881.yaml 2026-01-21 21:03:00+00:00| seen|...

6.1CVSS5.9AI score0.87301EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/08 11:15 a.m.11 views

CVE-2020-1779

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

4.9CVSS5.8AI score0.01004EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/08 11:15 a.m.33 views

CVE-2020-1779

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

4.9CVSS0.01004EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/02/08 11:15 a.m.45 views

CVE-2020-1779

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

4.9CVSS5.9AI score0.01004EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/08 11:15 a.m.9 views

UBUNTU-CVE-2020-1779

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

4.9CVSS5.8AI score0.01004EPSS
SaveExploits0References3
Prion
Prion
added 2021/02/08 11:15 a.m.24 views

Information disclosure

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

4CVSS5.1AI score0.01004EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/02/08 10:55 a.m.34 views

CVE-2020-1779 Dynamic templates reveal sensitive data when OTRS tags are used

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...

4.3CVSS5.1AI score0.01004EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/08 10:55 a.m.75 views

CVE-2020-1779

CVE-2020-1779 – Information disclosure in OTRS TicketForms : The issue affects OTRS AG OTRSTicketForms across 6.0.x (up to 6.0.40), 7.0.x (up to 7.0.29), and 8.0.x (up to 8.0.3). When dynamic templates are used, administrators can insert OTRS tags that are not properly masked, potentially reveali...

4.9CVSS4.8AI score0.01004EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/02/08 12:00 a.m.14 views

OTRS AG OTRSTicketForms 信息泄露漏洞

OTRS AG OTRSTicketForms is a functional add-on from OTRS Germany. Using it it is possible to display different ticket masks and forms in the agent and external interfaces, depending on which dynamic fields are relevant for the customer request. An information disclosure vulnerability exists in OT...

4.9CVSS5.8AI score0.01004EPSS
SaveExploits0References2
Gitee
Gitee
added 2021/02/07 7:53 p.m.4 views

pwntools

This repository is an open-source project for a Python library called pwntools, which is used for reverse engineering and exploitation of binaries. The library is designed to be a comprehensive tool for security researchers and developers. The repository contains a variety of files, including:...

7.1AI score
SaveExploits0
OSV
OSV
added 2021/02/02 7:15 a.m.7 views

DEBIAN-CVE-2021-3281

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method used by "startapp --template" and "startproject --template" allows directory traversal via an archive with absolute paths or relative paths with dot segments...

5.3CVSS6.5AI score0.07605EPSS
SaveExploits1References1
PyPA
PyPA
added 2021/02/02 7:15 a.m.14 views

PYSEC-2021-9

In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method used by "startapp --template" and "startproject --template" allows directory traversal via an archive with absolute paths or relative paths with dot segments...

5.3CVSS7AI score0.07605EPSS
SaveExploits1References6Affected Software1
ThreatPost
ThreatPost
added 2021/01/21 2:00 p.m.38 views

Google Searches Expose Stolen Corporate Credentials

Attackers behind a recently discovered phishing campaign have unintentionally left more than 1,000 stolen credentials available online via simple Google searches, researchers have found. The campaign, which began in August 2020, used e-mails that spoof notifications from Xerox scans to lure victi...

0.2AI score
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/01/20 4:38 a.m.12 views

jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates

A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names...

4.3CVSS5.8AI score0.01158EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.11 views

The vulnerability of the standard library of Windows operating system templates allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the standard library of Windows operating system templates is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00799EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/01/18 4:04 p.m.10 views

jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates

A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names...

4.3CVSS5.8AI score0.01158EPSS
SaveExploits0References5
Circl
Circl
added 2021/01/16 12:51 a.m.11 views

CVE-2021-21246

creationtimestamp| type| source ---|---|--- 2021-01-16 00:51:29+00:00| seen| https://t.me/cibsecurity/22235 2026-01-23 07:58:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21246.yaml 2026-01-24 21:03:01+00:00| seen|...

8.6CVSS7.3AI score0.49051EPSS
SaveExploits0References3
Rows per page
Query Builder