Lucene search
+L

2746 matches found

OSV
OSV
•added 2022/01/10 2:10 p.m.•19 views

CVE-2021-42748

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...

5.3CVSS5.8AI score0.00995EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/10 2:10 p.m.•40 views

CVE-2021-42748

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...

5.3CVSS0.00995EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/10 2:10 p.m.•34 views

Security feature bypass

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...

5CVSS5.4AI score0.00995EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/01/10 12:00 a.m.•20 views

FastLine Media Beaver Builder 安全漏洞

FastLine Media Beaver Builder is a front-end layout and styling designer from FastLine Media, Inc. It provides a WYSIWYG view when developing content areas. A security vulnerability exists in FastLine Media Beaver Builder, which stems from versions from Beaver Builder to 2.5.0.3, and can be...

5.3CVSS5.8AI score0.00995EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/01/07 6:10 p.m.•44 views

CVE-2021-42748

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...

5.7AI score0.00995EPSS
SaveExploits1References2
CVE
CVE
•added 2022/01/07 6:10 p.m.•67 views

CVE-2021-42748

CVE-2021-42748 affects Beaver Builder up to version 2.5.0.3. The issue allows attackers to bypass the visibility controls protection mechanism via the REST API, enabling unauthorized exposure of content. The vulnerability’s root cause is a bypass of visibility controls in REST API handling, with ...

5.3CVSS5.4AI score0.00995EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/07 12:00 a.m.•20 views

PT-2022-11674 · Unknown · Beaver Builder

Name of the Vulnerable Software and Affected Versions: Beaver Builder versions prior to 2.5.0.4 Description: The issue allows attackers to bypass the visibility controls protection mechanism. This can be achieved via the REST API. Recommendations: For versions prior to 2.5.0.4, update to version...

5.3CVSS5.3AI score0.00995EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/07 12:00 a.m.•8 views

CVE-2021-42748: Direct Request

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...

5.3CVSS5.8AI score0.00995EPSS
SaveExploits1References2
Trend Micro Simply Security
Trend Micro Simply Security
•added 2022/01/05 12:00 a.m.•24 views

Workshop: Building Modern Applications with DevOps Security

In this workshop, you’ll learn how to leverage DevOps Security with your serverless applications running on AWS Lambda or containerized applications running on AWS Fargate. Learn how to make cloud security more efficient, proactive, and gain visibility...

2.3AI score
SaveExploits0
CNVD
CNVD
•added 2022/01/05 12:00 a.m.•68 views

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2022-14710)

IBM Business Automation Workflow is a suite of workflow automation solutions from IBM USA. The product is mainly used for workflow management, compliance management, and features workflow visibility and scalability. A cross-site scripting vulnerability exists in IBM Business Automation Workflow,...

5.4CVSS5.1AI score0.00495EPSS
SaveExploits0References1
Imperva Blog
Imperva Blog
•added 2022/01/04 10:44 a.m.•128 views

2021 in Review, Part 4: 5 Cybersecurity Topics to Watch in 2022

One of the core principles of cybersecurity is not letting things “slip through the cracks”. An effective security posture depends on visibility. The more visibility you have into the environments where your data is, the more successful you will be in applying your organization’s security protoco...

9.3CVSS10AI score0.99999EPSS
SaveExploits385
Imperva Blog
Imperva Blog
•added 2021/12/21 4:27 p.m.•23 views

Imperva Snapshot™ Scan: What You Can Find in the Report

Imperva Snapshot is a free AWS RDS security assessment tool. You can use this tool to gain in-depth visibility into your data and get a deep understanding about what data resides in your RDS and where your RDS database security gaps are. Acquiring this intelligence is a key element and critical...

0.2AI score
SaveExploits0
CNVD
CNVD
•added 2021/12/21 12:00 a.m.•70 views

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2022-15537)

IBM Business Automation Workflow is a workflow automation solution from IBM USA. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability.IBM Business Automation Workflow has a security vulnerability that stems from the...

6.4CVSS3.1AI score0.00708EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2021/12/20 7:31 p.m.•26 views

Qualys Integrates with Shodan to Help Map the External Attack Surface

Qualys CyberSecurity Asset Management CSAM now natively integrates with Shodan to enable cybersecurity teams to identify all assets visible on the internet, including previously unknown and potential security issues… before attackers find them. Your attack surface is dynamic. Assets come and go,...

0.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/12/19 12:00 a.m.•64 views

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2021-101696)

IBM Business Automation Workflow is a workflow automation solution from IBM Corporation of the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.IBM Business Automation Workflow has a cross-sit...

5.4CVSS2.5AI score0.00495EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/14 4:15 p.m.•9 views

CVE-2021-44232

SAF-T Framework Transaction SAFTNG allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server...

7.7CVSS7.3AI score0.01007EPSS
SaveExploits0References3Affected Software1
VMware
VMware
•added 2021/12/10 12:00 a.m.•180 views

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Cloud Proxy VMware vRealize Automation VMware vRealize...

9.3CVSS7.6AI score0.99999EPSS
SaveExploits391References4Affected Software55
VMware
VMware
•added 2021/12/10 12:00 a.m.•122 views

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Cloud Proxy VMware vRealize Automation VMware vRealize...

9.3CVSS7.6AI score0.99999EPSS
SaveExploits391References4Affected Software55
VMware
VMware
•added 2021/12/10 12:00 a.m.•166 views

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Cloud Proxy VMware vRealize Automation VMware vRealize...

9.3CVSS7.6AI score0.99999EPSS
SaveExploits391References4Affected Software54
Malwarebytes
Malwarebytes
•added 2021/12/09 2:08 p.m.•38 views

What is a search engine and why does anyone care which one you use?

An attempt at a simple definition: a search engine is a software system that allows users to find content on the Internet based on their input. The introduction of the major search engines brought about huge changes in the way we use the Internet. There is a wealth of knowledge available for thos...

6.7AI score
SaveExploits0
Rows per page
Query Builder