CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

17032 matches found

F5 Networks•added 2023/02/21 7:32 p.m.•28 views

K36328238: The BIG-IP DNS system may erroneously display the TSIG key secret in plain text form

Security Advisory Description The BIG-IP DNS system may erroneously display the Transaction Signature TSIG key secret in plain text form. This issue occurs when all of the following conditions are met: You configured a TSIG key in the BIG-IP DNS system. You used one of the following methods to vi...

6.7AI score

SaveExploits0

F5 Networks•added 2023/02/21 6:58 p.m.•30 views

K10248311: The apmd process logs clear the text password in an iRule when in debug mode

Security Advisory Description This issue occurs when all of the following conditions are met: You have licensed and provisioned the BIG-IP APM module. You have configured the apmd process to log at the debug level. You have configured the BIG-IP APM virtual server to run an access policy using an...

6.7AI score

SaveExploits0

F5 Networks•added 2023/02/21 6:55 p.m.•49 views

K25434422: NGINX Controller vulnerability CVE-2020-5899

Security Advisory Description Recovery code required to change a user's password is transmitted and stored in the database in plain text, which allows an attacker who can intercept the database connection or have read access to the database, to request a password reset using the email address of...

7.8CVSS7.8AI score0.00185EPSS

SaveExploits0Affected Software1

F5 Networks•added 2023/02/21 6:55 p.m.•48 views

K73835689: Samba vulnerability CVE-2017-12150

Security Advisory Description It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text...

7.4CVSS6.6AI score0.13334EPSS

SaveExploits0

F5 Networks•added 2023/02/21 6:47 p.m.•757 views

K24823443: Apache Commons Text vulnerability CVE-2022-42889

Security Advisory Description Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup tha...

9.8CVSS8.5AI score0.99931EPSS

SaveExploits42

F5 Networks•added 2023/02/21 6:45 p.m.•48 views

K16835: ICU overflow vulnerabilities CVE-2014-8146 and CVE-2014-8147

Security Advisory Description CVE-2014-8146 The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 does not properly track directionally isolated pieces of text, which allows remot...

7.5CVSS8.5AI score0.2431EPSS

SaveExploits4Affected Software1

F5 Networks•added 2023/02/21 6:28 p.m.•164 views

K14059: CRIME vulnerability via the SPDY protocol CVE-2012-4930

Security Advisory Description The SPDY protocol 3, and earlier, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data. This allows man-in-the-middle attackers to obtain plain text HTTP headers by observing length differences during a series ...

2.6CVSS6.8AI score0.02079EPSS

SaveExploits1Affected Software3

F5 Networks•added 2023/02/21 6:11 p.m.•23 views

K03332436: The BIG-IP DNS Configuration utility may erroneously display the TSIG key secret in plain text form

Security Advisory Description The BIG-IP DNS Configuration utility may erroneously display the Transaction Signature TSIG key secret in plain text form. This issue occurs when all of the following conditions are met: You configure a TSIG key in the BIG-IP DNS system. You use the Configuration...

6.5AI score

SaveExploits0

F5 Networks•added 2023/02/21 6:03 p.m.•23 views

K21942600: A virtual server with a Client SSL profile may accept non-SSL traffic

Security Advisory Description A Client SSL profile using a cipher group and an option that modifies supported ciphers for example no-dtls or no-ssl accepts plain text connections, in addition to correctly handling SSL traffic. This issue occurs when all of the following conditions are met: A...

6.8AI score

SaveExploits0

Openbugbounty•added 2023/02/21 3:47 p.m.•18 views

southerncharmquiltinghsv.com Cross Site Scripting vulnerability OBB-3200215

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score

SaveExploits0

NVD•added 2023/02/21 3:15 p.m.•53 views

CVE-2021-32854

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

6.1CVSS6AI score0.00498EPSS

SaveExploits1References1

Prion•added 2023/02/21 3:15 p.m.•31 views

Cross site scripting

Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...

5.8CVSS5.9AI score0.00626EPSS

SaveExploits1References2Affected Software1

Snyk•added 2023/02/21 8:16 a.m.•7 views

Malicious Package

Overview wf-extract-text-in-image2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score

SaveExploits0References3