Lucene search
+L

6824 matches found

NVD
NVD
•added 2020/03/10 9:15 p.m.•29 views

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS9.6AI score0.01383EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/03/10 9:15 p.m.•19 views

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS7.4AI score0.01383EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/03/10 9:15 p.m.•12 views

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS8.7AI score0.01383EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2020/03/10 9:15 p.m.•29 views

Authentication flaw

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

7.5CVSS9.4AI score0.01383EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/03/10 8:18 p.m.•35 views

CVE-2020-6198

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS9.6AI score0.01383EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/10 8:18 p.m.•105 views

CVE-2020-6198

CVE-2020-6198 affects SAP Solution Manager (Diagnostics Agent), Version 720. Root cause: Missing authentication allows unencrypted connections from unauthenticated sources, enabling an attacker to remotely control all agent functions. Documents cite high/critical impact (CVSS v3.1 base score 9.8)...

9.8CVSS9.4AI score0.01383EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/10 12:00 a.m.•11 views

CVE-2020-6198: Missing Authentication for Critical Function

SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...

9.8CVSS8.3AI score0.01383EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/03/10 12:00 a.m.•7 views

PT-2020-1798

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description A spoofing issue exists due to an unsecured reply URL in Microsoft Visual Studio, which is not protected by SSL. This could allow a remote attacker to gain unauthorized access...

9CVSS0.01671EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/03/09 12:00 a.m.•31 views

CloudBees Jenkins BMC Release Package and Deployment Plugin Code Execution Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

4.3CVSS6.8AI score0.00691EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/09 12:00 a.m.•20 views

CloudBees Jenkins ECX Copy Data Management Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

4.3CVSS6.8AI score0.00691EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/09 12:00 a.m.•20 views

Unspecified Vulnerability in CloudBees Jenkins Eagle Tester Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

6.5CVSS6.8AI score0.00852EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/03/04 7:15 p.m.•21 views

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

9.8CVSS7.3AI score0.00745EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/04 7:15 p.m.•28 views

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

9.8CVSS9.4AI score0.00745EPSS
SaveExploits0References2
Prion
Prion
•added 2020/03/04 7:15 p.m.•29 views

Design/Logic Flaw

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

7.5CVSS9.3AI score0.00745EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2020/03/04 7:15 p.m.•12 views

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

9.8CVSS7.7AI score0.00745EPSS
SaveExploits0References4
CVE
CVE
•added 2020/03/04 6:19 p.m.•87 views

CVE-2020-9550

Rubetek SmartHome 2020 devices expose a vulnerability (CVE-2020-9550) due to unencrypted 433 MHz communication between controllers and beacons. This design allows an attacker to sniff beacon traffic and remotely spoof beacon requests. The vulnerability is reported across multiple feeds (NVD entry...

9.8CVSS9.2AI score0.00745EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/03/04 6:19 p.m.•38 views

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

9.4AI score0.00745EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2020/03/04 8:53 a.m.•25 views

UBUNTU-CVE-2020-1749

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...

7.5CVSS6.6AI score0.0124EPSS
SaveExploits0References8
osv_debian
osv_debian
•added 2020/03/02 5:15 a.m.•10 views

DEBIAN-CVE-2020-6794

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master...

6.5CVSS6.8AI score0.01016EPSS
SaveExploits1References1
NVD
NVD
•added 2020/03/02 5:15 a.m.•21 views

CVE-2020-6794

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master...

6.5CVSS7AI score0.01016EPSS
SaveExploits1References5
Rows per page
Query Builder