Lucene search
+L

16297 matches found

Positive Technologies
Positive Technologies
•added 2022/02/04 12:00 a.m.•10 views

PT-2022-10092

Name of the Vulnerable Software and Affected Versions XWiki versions prior to 12.10.5 XWiki versions prior to 13.2RC1 Description It is possible to determine if a user has an account in a wiki related to an email address and which usernames is tied to that email by forging a request to the "Forgo...

7.5CVSS0.00964EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2022/02/02 8:15 p.m.•23 views

CVE-2021-39021

IBM Guardium Data Encryption GDE 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856...

5.3CVSS5.8AI score0.00537EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/02/02 6:15 p.m.•15 views

CVE-2021-42641

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users...

7.5CVSS5.7AI score0.02043EPSS
SaveExploits1References8
Prion
Prion
•added 2022/02/02 6:15 p.m.•35 views

Design/Logic Flaw

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users...

5CVSS7.5AI score0.02043EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2022/02/02 12:00 a.m.•6 views

PT-2022-10845

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Encryption GDE version 5.0.0.2 Description The issue allows an unauthorized actor to potentially enumerate usernames due to the software behaving differently or sending different responses under various circumstances...

5.3CVSS0.00537EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/02 12:00 a.m.•10 views

CVE-2021-42641: Exposure of Resource to Wrong Sphere

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users...

7.5CVSS7.1AI score0.02043EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2022/02/02 12:00 a.m.•22 views

PT-2022-12353 · Sourcecodester · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Cold Storage Management System version 1.0 Description: An SQL Injection issue exists in the login functionality, specifically through the username field in the login.php file. This allows for potential unauthorized acce...

9.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/02/02 12:00 a.m.•7 views

PT-2022-11647

Name of the Vulnerable Software and Affected Versions PrinterLogic Web Stack versions 19.1.1.13 SP9 and below Description The issue allows an unauthenticated attacker to disclose the plaintext console username and password for a printer due to an Insecure Direct Object Reference IDOR vulnerabilit...

7.5CVSS0.01375EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2022/02/02 12:00 a.m.•22 views

IBM Guardium Data Encryption security vulnerability

IBM Guardium Data Encryption GDE is an application from IBM USA, Inc. IBM Guardium Data Encryption GDE 5.0.0.2 contains a security vulnerability that can be exploited by attackers to cause username enumeration...

5.3CVSS5.6AI score0.00537EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/02/01 2:15 p.m.•21 views

CVE-2021-43510

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...

9.8CVSS7.4AI score0.07515EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/01 12:00 a.m.•9 views

CVE-2021-43510: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...

9.8CVSS8.2AI score0.07515EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/01 12:00 a.m.•11 views

PT-2022-11863

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the username field in the "login.php" file. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client...

9.8CVSS0.07515EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/02/01 12:00 a.m.•15 views

CVE-2021-39021

IBM Guardium Data Encryption GDE 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856...

5.3CVSS6AI score0.00537EPSS
SaveExploits0References3Affected Software1
Tibco
Tibco
•added 2022/01/31 9:03 p.m.•33 views

TIBCO Security Advisory: February 15, 2022 - TIBCO BusinessConnect Container Edition -2021-43050

TIBCO BusinessConnect Container Edition administrative username and passwords leakage Original release date: February15, 2022 Last revised: --- CVE-2021-43050 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Container Edition versions 1.1.0 and below The following component is...

8.4CVSS8.1AI score0.00248EPSS
SaveExploits0Affected Software1
Tibco
Tibco
•added 2022/01/31 8:31 p.m.•38 views

TIBCO Security Advisory: February 15, 2022 - TIBCO BusinessConnect Container Edition -2021-43049

TIBCO BusinessConnect Container Edition username and password leakage Original release date: February 15, 2022 Last revised: --- CVE-2021-43049 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Container Edition versions 1.1.0 and below The following component is affected:...

10CVSS9.8AI score0.01326EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2022/01/31 4:42 p.m.•108 views

Critical: Red Hat Security Advisory: samba security and bug fix update

An update for samba is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9CVSS7.4AI score0.73589EPSS
SaveExploits2References4
osv_alsa
osv_alsa
•added 2022/01/31 3:40 p.m.•49 views

ALSA-2022:0332 Critical: samba security and bug fix update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...

9CVSS8AI score0.73589EPSS
SaveExploits2References1
Rockylinux
Rockylinux
•added 2022/01/31 3:40 p.m.•46 views

samba security and bug fix update

An update is available for samba. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...

9CVSS0.7AI score0.73589EPSS
SaveExploits2
osv_rlsa
osv_rlsa
•added 2022/01/31 3:40 p.m.•49 views

RLSA-2022:0332 Critical: samba security and bug fix update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...

9.9CVSS8AI score0.73589EPSS
SaveExploits2References4
AlmaLinux
AlmaLinux
•added 2022/01/31 3:40 p.m.•82 views

Critical: samba security and bug fix update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...

9CVSS9.1AI score0.73589EPSS
SaveExploits2References1
Rows per page
Query Builder