Lucene search
+L

2565 matches found

CVE
CVE
added 2020/07/14 10:54 p.m.96 views

CVE-2020-1391

CVE-2020-1391 is a Windows information-disclosure issue in the Windows Agent Activation Runtime (AarSvc). The vulnerability arises because AarSvc fails to properly handle objects in memory, enabling an attacker who can log on to run a crafted app that could disclose information to further comprom...

5.5CVSS6.5AI score0.01224EPSS
SaveExploits0References1Affected Software2
Microsoft KB
Microsoft KB
added 2020/07/14 7:00 a.m.203 views

July 14, 2020—KB4565539 (Security-only update)

None None...

10CVSS6.8AI score0.91353EPSS
SaveExploits21
Microsoft CVE
Microsoft CVE
added 2020/07/14 7:00 a.m.308 views

Windows Agent Activation Runtime Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Agent Activation Runtime AarSvc fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...

5.5CVSS3.5AI score0.01224EPSS
SaveExploits0
Hacker One
Hacker One
added 2020/06/30 1:48 p.m.31 views

Clario: No rate Limit on Licenses Activation

Introduction A little bit about Rate Limit A rate-limiting algorithm is used to check if the user session or IP-address has to be limited based on the information in the session cache. In case a client made too many requests within a given time-frame, HTTP-Servers can respond with status code 429...

0.2AI score
SaveExploits0
CNVD
CNVD
added 2020/06/28 12:00 a.m.12 views

Naviwebs Navigate CMS Authorization Issue Vulnerability (CNVD-2020-35977)

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A security vulnerability exists in Naviwebs Navigate CMS version 2.9 r1433, which originated when the program resets passwords, allowing users to continue setting passwords even if an...

7.5CVSS7.1AI score0.01361EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/24 3:15 p.m.9 views

CVE-2020-14015

An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a...

7.5CVSS7.2AI score0.01361EPSS
SaveExploits1References1
Prion
Prion
added 2020/06/24 3:15 p.m.23 views

Default credentials

An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a...

5CVSS7.6AI score0.01361EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/06/24 2:23 p.m.33 views

CVE-2020-14015

An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a...

7.6AI score0.01361EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/19 4:15 p.m.19 views

CVE-2019-20873

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation...

6.5CVSS6.3AI score
SaveExploits0References1
NVD
NVD
added 2020/06/19 4:15 p.m.21 views

CVE-2019-20873

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation...

6.5CVSS0.00933EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/19 3:24 p.m.25 views

CVE-2019-20873

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation...

6.3AI score0.00933EPSS
SaveExploits0References1
CVE
CVE
added 2020/06/19 3:24 p.m.52 views

CVE-2019-20873

Technical details about CVE-2019-20873 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

6.5CVSS6.2AI score0.00933EPSS
SaveExploits0References1Affected Software1
zdt
zdt
added 2020/06/04 12:00 a.m.64 views

Navigate CMS 2.8.7 - (sidx) SQL Injection (Authenticated) Exploit

Exploit for php platform in category web applications Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection Authenticated Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link:...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/06/04 12:00 a.m.286 views

Navigate CMS 2.8.7 SQL Injection

Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection Authenticated Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.8.7r1401.zip/download Version: 2.8.7 Tested...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/06/04 12:00 a.m.217 views

Navigate CMS 2.8.7 - ''sidx' SQL Injection (Authenticated)

Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection Authenticated Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.8.7r1401.zip/download Version: 2.8.7 Tested...

5.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/05/12 2:00 p.m.47 views

Internet Explorer help

None None...

7.6CVSS6.9AI score0.06416EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/05/12 2:00 p.m.423 views

May 12, 2020—KB4556854 (Security-only update)

None None...

9.9CVSS6.8AI score0.54158EPSS
SaveExploits17
Microsoft KB
Microsoft KB
added 2020/05/12 2:00 p.m.115 views

May 12, 2020—KB4556843 (Security-only update)

None None...

9.9CVSS6.8AI score0.54158EPSS
SaveExploits17
UbuntuCve
UbuntuCve
added 2020/04/29 5:15 p.m.34 views

CVE-2020-12277

GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated...

5.3CVSS6.1AI score0.00769EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2020/04/29 4:28 p.m.53 views

CVE-2020-12277

Removed by vendor...

5.3CVSS6AI score0.00769EPSS
SaveExploits0
Rows per page
Query Builder