Lucene search
+L

4442 matches found

OSV
OSV
•added 2022/01/18 10:03 p.m.•44 views

CVE-2022-21693 Path traversal in Onionshare

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions an adversary with a primitive that allows for filesystem access from the context of the Onionshare process can access sensitive...

6.3CVSS6.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/01/18 9:55 p.m.•8 views

CVE-2022-21695 Improper Access Control in Onionshare

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions authenticated users or unauthenticated in public mode can send messages without being visible in the list of chat participants. Th...

4.3CVSS7.1AI score0.00856EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/01/18 12:00 a.m.•20 views

OnionShare 授权问题漏洞

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a security vulnerability that...

5.3CVSS5.6AI score0.00856EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/01/11 8:15 p.m.•16 views

CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

5.3CVSS6AI score0.01416EPSS
SaveExploits1References4
OSV
OSV
•added 2022/01/11 8:15 p.m.•11 views

CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

5.3CVSS5.8AI score0.01416EPSS
SaveExploits1References3
Prion
Prion
•added 2022/01/11 8:15 p.m.•26 views

Authentication flaw

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

5CVSS5.2AI score0.01416EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/01/03 10:15 p.m.•18 views

CVE-2021-39981

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call...

5.3CVSS5.8AI score0.00469EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/03 10:15 p.m.•13 views

CVE-2021-39981

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call...

5.3CVSS6AI score0.00469EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/01/03 10:15 p.m.•32 views

CVE-2021-39981

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call...

5.3CVSS0.00469EPSS
SaveExploits0References1
Prion
Prion
•added 2022/01/03 10:15 p.m.•27 views

Design/Logic Flaw

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call...

4.3CVSS5.2AI score0.00469EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/01/03 9:07 p.m.•34 views

CVE-2021-39981

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call...

5.5AI score0.00469EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/03 9:07 p.m.•68 views

CVE-2021-39981

Technical details for CVE-2021-39981 are not publicly available in the provided documents. No concrete impact, affected products, or remediation are confirmed here. Monitor for updates across connected sources.

5.3CVSS5.2AI score0.00469EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/03 12:00 a.m.•5 views

PT-2022-11107

Name of the Vulnerable Software and Affected Versions Chang Lian application affected versions not specified Description The issue allows malicious exploitation to hide the calling number, enabling anonymous calls. Successful exploitation of this issue enables making calls without revealing the...

5.3CVSS0.00469EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/03 12:00 a.m.•8 views

CVE-2021-39981: Undefined Security Weakness

Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call...

5.3CVSS5.9AI score0.00469EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2022/01/01 9:08 a.m.•16 views

narcoticsanonymousnj.org Cross Site Scripting vulnerability OBB-2318878

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
•added 2021/12/06 4:15 a.m.•11 views

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

6.5CVSS5.8AI score0.01256EPSS
SaveExploits1References3
NVD
NVD
•added 2021/12/06 4:15 a.m.•27 views

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

6.5CVSS0.01256EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/12/06 4:15 a.m.•7 views

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

6.5CVSS6.6AI score0.01256EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/12/06 12:00 a.m.•33 views

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

6.7AI score0.01256EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/12/06 12:00 a.m.•15 views

PT-2021-23728 · Kaseya · Kaseya Unitrends Backup Appliance

Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Samba file sharing service, allowing anonymous read/write access. Recommendations: For versions prior to 10.5.5, update to version 10.5.5 o...

6.5CVSS6.4AI score0.01256EPSS
SaveExploits1References7
Rows per page
Query Builder