Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

17353 matches found

Cvelist
Cvelist•added 2023/01/03 8:04 p.m.•34 views

CVE-2022-43537

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

7.2CVSS7.4AI score0.01437EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2023/01/03 7:55 p.m.•33 views

CVE-2022-43532

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script...

8CVSS7.2AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2023/01/03 6:37 p.m.•8 views

CVE-2022-43519

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

8.8CVSS7.4AI score0.00952EPSS
SaveExploits0References1
GithubExploit
GithubExploit•added 2023/01/03 9:49 a.m.•310 views

Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this reposi...

8.8CVSS9.3AI score0.06663EPSS
SaveExploits6
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•12 views

PT-2023-14497 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.7AI score0.00897EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•11 views

PT-2023-14234 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•13 views

PT-2023-14229 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.8AI score0.00952EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•11 views

PT-2023-14233 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•15 views

PT-2023-14231 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•10 views

PT-2023-14496 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

7.2CVSS7.2AI score0.01125EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•10 views

PT-2023-14238 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

6.1CVSS6.5AI score0.00462EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•12 views

PT-2023-14232 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•9 views

PT-2023-14236 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

6.1CVSS6.5AI score0.00462EPSS
SaveExploits0References4
NVD
NVD•added 2023/01/02 8:15 p.m.•38 views

CVE-2023-22452

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.5AI score0.00548EPSS
SaveExploits0References2
Prion
Prion•added 2023/01/02 8:15 p.m.•17 views

Input validation

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

4CVSS6.5AI score0.00548EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2023/01/02 7:17 p.m.•36 views

CVE-2023-22452 Improper Input Validation in kenny2automate

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.7AI score0.00548EPSS
SaveExploits0References2
CVE
CVE•added 2023/01/02 7:17 p.m.•106 views

CVE-2023-22452

CVE-2023-22452 affects the Discord bot kenny2automate . The vulnerability is in the web interface for server settings where input names embedded Discord channel IDs, with no validation to confirm the IDs belong to the target server before commit a947d7c. This enables an attacker who has access to...

6.5CVSS6.5AI score0.00548EPSS
SaveExploits0References2Affected Software1
OSV
OSV•added 2023/01/02 7:17 p.m.•24 views

CVE-2023-22452 Improper Input Validation in kenny2automate

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.5AI score
SaveExploits0References4
Debian
Debian•added 2022/12/31 9:27 a.m.•132 views

[SECURITY] [DLA 3252-1] cacti security update

Debian LTS Advisory DLA-3252-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2022 https://wiki.debian.org/LTS Package : cacti Version : 1.2.2+ds1-2+deb10u5 CVE ID : CVE-2020-8813 CVE-2020-23226 CVE-2020-25706 CVE-2022-0730 CVE-2022-46169 Debian Bug :...

9.8CVSS7.5AI score0.99826EPSS
SaveExploits74
BDU FSTEC
BDU FSTEC•added 2022/12/30 12:00 a.m.•11 views

The vulnerability in the web interface for controlling Siemens SCALANCE industrial switches allows a hacker to execute arbitrary code.

The vulnerability of the web interface for controlling Siemens SCALANCE industrial switches is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.01133EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder