4466 matches found
WordPress 3.7.x < 3.7.36 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
WordPress 4.0.x < 4.0.33 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
WordPress 4.1.x < 4.1.33 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
WordPress 5.1.x < 5.1.10 Object injection
According to its self-reported version number, the detected WordPress application is affected by an object injection vulnerability in PHPMailer. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
APSoft-Web-Scanner-v2 - Powerful Dork Searcher And Vulnerability Scanner For Windows Platform
APSoftWebscanner Version 2 new version of APSoft Webscanner Version 1 Software pictures What can i do with this ? with this software, you will be able to search your dorks in supported search engines and scan grabbed urls to find their vulnerabilities. in addition , you will be able to generate...
Tenable Nessus Network Monitor Unsupported Version Detection
According to its self-reported version number, the installation of Tenable Nessus Network Monitor NNM on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...
Apache Tomcat < 7.0.78 Vulnerability
Binary data 701333.pasl...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Nettle vulnerability (USN-4906-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4906-1 advisory. It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash,...
CVE-2021-28322: Improper Privilege Management
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability...
CVE-2021-28321: Improper Link Resolution Before File Access
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability...
CVE-2021-28313: Improper Privilege Management
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability...
AM Live Vulnerability Management Conference Part 2: What was I talking about there
Hello all! It is the second part about AM Live Vulnerability Management conference. In the first part I made the timecodes for the 2 hours video in Russian. Here I have combined all my lines into one text. What is Vulnerability Management? Vulnerability Management process is the opposite of the...
Nessus Network Monitor < 5.13.0 Multiple Vulnerabilities (TNS-2021-02)
The version of Nessus Network Monitor NNM installed on the remote host is prior to 5.13.0. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid147729; scriptversion"1.8";...
Node.js 8.5.x < 8.6.0 Path Traversal
Node.js version 8.5.0 included a change to ".." handling which caused a security vulnerability in the checks on paths made by some community modules. As a result, an attacker may be able to access file system paths other than those intended. This issue is fixed in version 8.6.0. No source data...
Cisco Content Security Management Appliance Information Disclosure (cisco-sa-esa-sma-info-disclo-VOu2GHbZ)
An information disclosure vulnerability exists in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA due to confidential information being included in HTTP requests that are exchanged between the user and the device. An authenticated,...
OWASP ASST (Automated Software Security Toolkit) - A Novel Open Source Web Security Scanner
OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can be fatall...
CVE-2021-1728: Improper Privilege Management
System Center Operations Manager Elevation of Privilege Vulnerability...
CVE-2021-24113: Undefined Security Weakness
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...