Lucene search
+L

35 matches found

EUVD
EUVD
•added 2025/11/25 12:31 a.m.•17 views

EUVD-2025-199015

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

7.5CVSS6.2AI score0.00276EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/25 12:17 a.m.•26 views

CVE-2025-54338

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

7.5CVSS6.7AI score0.00276EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/24 10:15 p.m.•14 views

CVE-2025-54338

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

7.5CVSS5.7AI score0.00276EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/24 10:15 p.m.•17 views

CVE-2025-54338

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

7.5CVSS0.00276EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/24 12:00 a.m.•33 views

CVE-2025-54338

An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows an attacker to disclose user hashes . To remediate this issue, it is recommended to update the software to a version later than 6.1....

7.5CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/24 12:00 a.m.•5 views

CVE-2025-54338

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

5.8AI score0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•1 views

CVE-2025-54338: Improper Access Control

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

7.5CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•19 views

PT-2025-47970

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description An Incorrect Access Control issue exists in the Application Server component of the software. This allows an attacker to disclose user hashes. Recommendations Update to a...

7.5CVSS6.5AI score0.00276EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•15 views

Desktop Alert PingAlert 安全漏洞

Desktop Alert PingAlert is a network status monitoring tool from US-based Desktop Alert. A security vulnerability exists in Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2, which stems from improper access control and could lead to disclosure of user hashes...

7.5CVSS6.4AI score0.00276EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2020-0266

Malware in sbrugna...

8.1CVSS7.5AI score0.00626EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-6027

Malware in sbrugna...

8.8CVSS7.8AI score0.01155EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2024/07/09 12:04 p.m.•14 views

CVE-2023-52237

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969NC, RUGGEDCOM RMC30,...

7.7CVSS7.3AI score0.00444EPSS
SaveExploits0References1
Veracode
Veracode
•added 2023/05/19 4:07 a.m.•32 views

Password Disclosure

github.com/mattermost/mattermost-server is vulnerable to Password Disclosure. The vulnerability exists because the user passwords and user hashes were revealed in audit logs if the experimental audit logging configuration was enabled ExperimentalAuditSettings section in config...

7.5CVSS6.8AI score0.00547EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/10/04 6:15 p.m.•15 views

CVE-2021-23858

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, device details are exposed which include the serial number and the firmware version by another...

7.5CVSS5.8AI score0.01243EPSS
SaveExploits0References1
Prion
Prion
•added 2020/01/30 8:15 p.m.•29 views

Default credentials

Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problematic especially...

5.5CVSS8.1AI score0.00626EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/01/30 8:05 p.m.•65 views

CVE-2020-5229 Opencast stores passwords using outdated MD5 hash algorithm

Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problematic especially...

7.7CVSS8.1AI score0.00626EPSS
SaveExploits0References2
NVD
NVD
•added 2017/09/28 1:29 a.m.•28 views

CVE-2017-14527

Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DTD,...

8.8CVSS8.5AI score0.01376EPSS
SaveExploits3References2
NVD
NVD
•added 2017/09/28 1:29 a.m.•33 views

CVE-2017-14526

Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DT...

8.8CVSS8.5AI score0.01155EPSS
SaveExploits2References2
Prion
Prion
•added 2017/09/28 1:29 a.m.•25 views

Xxe

Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DT...

6.5CVSS8.4AI score0.01155EPSS
SaveExploits2References2Affected Software2
Cvelist
Cvelist
•added 2017/09/27 5:00 p.m.•40 views

CVE-2017-14527

Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DTD,...

8.5AI score0.01376EPSS
SaveExploits3References2
Rows per page
Query Builder