Lucene search
+L

5796 matches found

OSV
OSV
•added 2019/04/17 2:29 p.m.•9 views

CVE-2019-6568

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with...

7.5CVSS7.1AI score0.01401EPSS
SaveExploits0References2
NVD
NVD
•added 2019/04/17 2:29 p.m.•28 views

CVE-2019-6568

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with...

7.5CVSS7.5AI score0.01401EPSS
SaveExploits0References2
Prion
Prion
•added 2019/04/17 2:29 p.m.•22 views

Design/Logic Flaw

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with...

5CVSS7.4AI score0.01401EPSS
SaveExploits0References2Affected Software40
Vulnrichment
Vulnrichment
•added 2019/04/17 1:40 p.m.•11 views

CVE-2019-6568

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with...

7.5CVSS7.1AI score0.01401EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/04/17 1:40 p.m.•34 views

CVE-2019-6568

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with...

7.5CVSS7.4AI score0.01401EPSS
SaveExploits0References2
zdt
zdt
•added 2019/04/15 12:00 a.m.•60 views

Linux/x86 - Cat File Encode to base64 and post via curl to Webserver Shellcode (125 bytes)

Exploit Title: Linux/x86 cat file encode to base64 and post via curl to webserver 125 bytes Exploit Author: strider Vendor Homepage: None Software Link: None Tested on: Debian 9 Stretch i386/ Kali Linux i386 CVE : None Shellcode Length: 125...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2019/04/12 12:00 a.m.•28 views

Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2019-13853)

Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A cross-site scripting vulnerability exists in the airflow webserver servi...

4.8CVSS6.4AI score0.02656EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/04/12 12:00 a.m.•22 views

Apache Airflow Cross-Site Request Forgery Vulnerability (CNVD-2019-13855)

Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A cross-site request forgery vulnerability exists in the airflow webserver...

8.8CVSS6.9AI score0.01563EPSS
SaveExploits0References1
Veracode
Veracode
•added 2019/04/11 3:15 a.m.•30 views

Cross-Site Request Forgery (CSRF)

apache-airflow is vulnerable to cross-site request forgery CSRF. A lack of request verification did not allow the webserver to determine the authenticity of HTTP requests, allowing a remote attacker to perform CSRF attacks...

8.8CVSS8.5AI score0.01563EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2019/04/10 8:29 p.m.•18 views

CVE-2019-0229

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

8.8CVSS8.7AI score
SaveExploits0References3
NVD
NVD
•added 2019/04/10 8:29 p.m.•33 views

CVE-2019-0229

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

8.8CVSS8.7AI score0.01563EPSS
SaveExploits0References3
PyPA
PyPA
•added 2019/04/10 8:29 p.m.•18 views

PYSEC-2019-215

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

8.8CVSS6.9AI score0.01563EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2019/04/10 8:29 p.m.•29 views

Cross site request forgery (csrf)

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

6.8CVSS8.6AI score0.01563EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2019/04/10 8:29 p.m.•56 views

PYSEC-2019-215

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

8.8CVSS2AI score0.01563EPSS
SaveExploits0References4
Mend
Mend
•added 2019/04/10 7:51 p.m.•5 views

CVE-2019-0229

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

8.8CVSS0.01563EPSS
SaveExploits0References9
CVE
CVE
•added 2019/04/10 7:51 p.m.•114 views

CVE-2019-0229

The CVE-2019-0229 entry concerns cross-site request forgery (CSRF) in the Airflow webserver. The affected surface is multiple HTTP endpoints in both the RBAC and classic Airflow webservers, where protections against CSRF are insufficient. Root cause cited across connected sources is lack of adequ...

8.8CVSS8.7AI score0.01563EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/04/10 7:51 p.m.•45 views

CVE-2019-0229

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

8.8AI score0.01563EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/04/10 12:00 a.m.•4 views

PT-2019-11201

Name of the Vulnerable Software and Affected Versions: Apache Airflow affected versions not specified Description: The issue concerns a lack of adequate protection in several HTTP endpoints within the Airflow webserver, making them susceptible to cross-site request forgery attacks. This affects...

8.8CVSS0.01563EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/10 12:00 a.m.•5 views

CVE-2019-0229: Cross-Site Request Forgery (CSRF)

A number of HTTP endpoints in the Airflow webserver both RBAC and classic did not have adequate protection and were vulnerable to cross-site request forgery attacks...

8.8CVSS5.7AI score0.01563EPSS
SaveExploits0References2
OSV
OSV
•added 2019/03/31 2:29 p.m.•21 views

CVE-2019-10664

Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp...

9.8CVSS8.5AI score
SaveExploits0References3
Rows per page
Query Builder