Lucene search
+L

15246 matches found

Atlassian
Atlassian
added 2024/04/09 1:53 a.m.53 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of...

8.8CVSS7AI score0.10379EPSS
SaveExploits1
Atlassian
Atlassian
added 2024/04/09 1:52 a.m.61 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of...

8.8CVSS7AI score0.05041EPSS
SaveExploits2
Atlassian
Atlassian
added 2024/04/09 1:52 a.m.50 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of...

8.8CVSS7AI score0.20929EPSS
SaveExploits2
Atlassian
Atlassian
added 2024/04/09 1:51 a.m.45 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of...

8.1CVSS7AI score0.10911EPSS
SaveExploits1
Atlassian
Atlassian
added 2024/04/09 1:51 a.m.47 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of...

8.8CVSS7AI score0.05018EPSS
SaveExploits2
Atlassian
Atlassian
added 2024/04/09 1:51 a.m.45 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of...

8.8CVSS7AI score0.03673EPSS
SaveExploits0
Atlassian
Atlassian
added 2024/04/09 1:50 a.m.51 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of...

8.8CVSS6.5AI score0.03626EPSS
SaveExploits0
CVE
CVE
added 2024/04/08 12:16 a.m.84 views

CVE-2024-28744

The vulnerability CVE-2024-28744 affects FURUNO ACERA 9010 devices in non MS mode with the initial configuration. In firmware v02.04 and earlier (both 9010-08 and 9010-24), the password is empty, allowing an unauthenticated attacker to log in without a password and potentially read or modify info...

8.8CVSS6.9AI score0.00298EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/08 12:16 a.m.15 views

CVE-2024-28744

The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuration and user...

7AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/05 9:15 p.m.15 views

CVE-2024-27911

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password...

7.5CVSS7.4AI score0.00486EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/05 8:47 p.m.14 views

CVE-2024-27911

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password...

7.5CVSS6.9AI score0.00486EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/05 8:46 p.m.15 views

CVE-2024-27910

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer without authentication...

5.3CVSS7.2AI score0.00545EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/05 8:46 p.m.41 views

CVE-2024-27910

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer without authentication...

5.3CVSS5.6AI score0.00545EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/05 12:00 a.m.9 views

Lenovo Printer 安全漏洞

Lenovo printers is a printer from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Printer that originates from allowing an unauthenticated attacker to obtain the administrator password...

7.5CVSS6.8AI score0.00486EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/04 8:15 p.m.27 views

CVE-2024-22023

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS...

5.3CVSS5.3AI score0.03EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/04 7:45 p.m.29 views

CVE-2024-22023

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS...

5.3CVSS7AI score0.03EPSS
SaveExploits0References1
Atlassian
Atlassian
added 2024/04/04 4:45 a.m.92 views

DoS (Denial of Service) net.minidev:json-smart Dependency in Jira Software Data Center and Server

This High severity net.minidev:json-smart Dependency vulnerability was introduced in versions 8.20.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, and 9.12.0 of Jira Software Data Center and Server. This net.minidev:json-smart Dependency vulnerability, wit...

7.5CVSS7.7AI score0.01119EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2024/04/04 12:15 a.m.6 views

CVE-2024-29225

ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request...

4.3CVSS7.3AI score0.00254EPSS
SaveExploits0References3Affected Software5
NVD
NVD
added 2024/04/04 12:15 a.m.26 views

CVE-2024-25568

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W...

8.8CVSS8AI score0.01135EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/04 12:04 a.m.39 views

CVE-2024-29225

ELECOM wireless LAN routers allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request...

6.4AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder