Lucene search
+L

19893 matches found

OSV
OSV
added 2020/08/12 1:15 p.m.11 views

CVE-2020-6932

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server...

9.8CVSS7.9AI score0.03589EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/12 1:15 p.m.24 views

CVE-2020-6932

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server...

10CVSS9.4AI score0.03589EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/08/12 1:15 p.m.8 views

CVE-2020-6932

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server...

10CVSS9.5AI score0.03589EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/08/12 12:21 p.m.72 views

CVE-2020-6932

CVE-2020-6932 affects BlackBerry QNX Software Development Platform (SDP) 6.4.0–6.6.0, specifically the slinger web server. The root cause is a directory traversal and remote code execution flaw in the slinger component that could allow an attacker to read arbitrary files and execute arbitrary cod...

10CVSS9.2AI score0.03589EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/12 12:21 p.m.39 views

CVE-2020-6932

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server...

10CVSS9.4AI score0.03589EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/12 12:00 a.m.7 views

Multiple Vulnerabilities in JAVAPMS Portal Management System of Nanchang Zhengneng Information Technology Co.

JAVAPMS portal management system to SpringMVC + Spring + Hibernate + Freemarker + Html5 + jQuery for the technical core architecture , for individual webmasters , commercial enterprises , government agencies , educational institutions and other various units of the organization's information port...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/08/12 12:00 a.m.17 views

PT-2020-19296 · Blackberry · Qnx Slinger Web Server +1

Name of the Vulnerable Software and Affected Versions: BlackBerry QNX Software Development Platform versions 6.4.0 through 6.6.0 Description: The issue is related to an information disclosure and remote code execution vulnerability in the slinger web server. This could allow an attacker to read...

10CVSS9.3AI score0.03589EPSS
SaveExploits0References5
NVD
NVD
added 2020/08/11 6:15 p.m.20 views

CVE-2020-13174

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking...

6.1CVSS6.2AI score0.00661EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/11 6:15 p.m.8 views

CVE-2020-13174

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking...

6.1CVSS5.8AI score0.00661EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/11 6:15 p.m.21 views

Design/Logic Flaw

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking...

4.3CVSS6.2AI score0.00661EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/11 5:31 p.m.39 views

CVE-2020-13174

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking...

6.2AI score0.00661EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/11 5:31 p.m.59 views

CVE-2020-13174

The CVE-2020-13174 entry affects the Teradici Management Console, specifically the web server in versions 20.04 and 20.01.1. The root cause is that the X-Frame-Options HTTP header was not properly set, enabling clickjacking or UI redress attacks by tricking users into clicking malicious links. Co...

6.1CVSS6.2AI score0.00661EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/08/11 12:00 a.m.7 views

Command Execution Vulnerability in Empire CMS v7.5 Backend

EmpireCMS Empire Content Management System is an open source content management system CMS. A command execution vulnerability exists in the Empire CMS v7.5 backend, which can be exploited by an attacker to gain access to the web server...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/08/11 12:00 a.m.58 views

Apache HTTP Server Environment Issue Vulnerability (CNVD-2020-46279)

Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An environmental issue vulnerability exists in Apache HTTP Server versions 2.4.20 through 2.4.43. An attacker...

7.5CVSS7.9AI score0.56448EPSS
SaveExploits2References1
CNVD
CNVD
added 2020/08/11 12:00 a.m.9 views

File upload vulnerability in zblogphp 1.5.1

Z-Blog is an open source program based on Asp and PHP platforms. Z-Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/08/11 12:00 a.m.63 views

Apache HTTP Server Environment Issues Vulnerabilities

Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A security vulnerability exists in Apache HTTP Server versions 2.4.20 through 2.4.43, which can be exploited by ...

7.5CVSS8.4AI score0.88844EPSS
SaveExploits0References1
NCSC
NCSC
added 2020/08/10 12:00 a.m.10 views

Vulnerabilities fixed in Apache HTTP Server

Vulnerabilities have been fixed in Apache HTTP Server. The vulnerabilities allow a malicious party to perform attacks execute attacks that result in the following categories of damage: Denial of Service Apache has made updates available to address the vulnerabilities. fixes. More information can ...

7.5CVSS7.7AI score0.88844EPSS
SaveExploits2
WPVulnDB
WPVulnDB
added 2020/08/10 12:00 a.m.28 views

File Manager < 6.5 - Backup File Directory Listing

The File Manager WordPress plugin could expose backup files if the web server had Directory Listing enabled. The File Manager WordPress plugin, version 6.4 and lower, failed to restrict external access to the fmbackups directory with a .htaccess file. This resulted in the ability for...

5CVSS2.3AI score0.15906EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2020/08/07 4:15 p.m.4 views

ALPINE-CVE-2020-11984

Apache HTTP server 2.4.32 to 2.4.44 modproxyuwsgi info disclosure and possible RCE...

9.8CVSS6.8AI score0.90039EPSS
SaveExploits2References1
Veracode
Veracode
added 2020/08/06 9:30 p.m.29 views

Privilege Escalation

pdns-recursor is vulnerable to privilege escalation. The vulnerability exists as pdns-recursor does not properly restrict ACL access to the internal web server...

5.3CVSS3.6AI score0.01702EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder