Lucene search
+L

3827 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 6:10 p.m.9 views

CVE-1999-0497

Anonymous FTP is enabled...

7AI score0.07085EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2025/05/21 12:51 a.m.6 views

SUSE CVE-2025-4123

A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...

7.6CVSS5.6AI score0.97007EPSS
SaveExploits6References7
Grafana
Grafana
added 2025/05/21 12:00 a.m.19 views

Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin

A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...

7.6CVSS7.4AI score0.97007EPSS
SaveExploits6
Wired Threat Level
Wired Threat Level
added 2025/05/19 10:00 a.m.15 views

For Tech Whistleblowers, There’s Safety in Numbers

Amber Scorah and Psst are building a “digital safe” to help people shine a light on the bad things their bosses are doing, without getting found out...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/05/19 6:24 a.m.14 views

grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect

A flaw was found in Grafana's custom frontend plugin handling. This vulnerability allows an attacker to perform a cross-site scripting XSS attack by exploiting a client path traversal and an open redirect issue, leading to arbitrary JavaScript execution and potential user redirection to malicious...

7.6CVSS5.8AI score0.97007EPSS
SaveExploits6References5
RedHat Linux
RedHat Linux
added 2025/05/19 6:21 a.m.11 views

grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect

A flaw was found in Grafana's custom frontend plugin handling. This vulnerability allows an attacker to perform a cross-site scripting XSS attack by exploiting a client path traversal and an open redirect issue, leading to arbitrary JavaScript execution and potential user redirection to malicious...

7.6CVSS5.8AI score0.97007EPSS
SaveExploits6References5
Packet Storm News
Packet Storm News
added 2025/05/19 12:00 a.m.10 views

Lara: Lightweight Anonymous Authentication with Asynchronous Revocation Auditability

Anonymous authentication is a technique that allows to combine access control with privacy preservation. Typically, clients use different pseudonyms for each access, hindering providers from correlating their activities. To perform the revocation of pseudonyms in a privacy preserving manner is...

7AI score
SaveExploits0
HackRead
HackRead
added 2025/05/12 9:34 p.m.14 views

Anonymous Hackers Steal Flight Data from US Deportation Airline GlobalX

A hacker group claiming affiliation with Anonymous says it breached GlobalX Airlines, leaking sensitive flight and passenger data…...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2025/05/09 12:00 a.m.11 views

Remove the Send anonymous usage statistics options at preferences at Storefront

To remove the option of sending anonymous usage statistics to improve Citrix Workspace app at preferences for Stores...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2025/05/07 12:00 a.m.28 views

Moodle Information Disclosure Vulnerability

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from the fact that anonymous assignment submissions can...

4.3CVSS4.2AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/02 10:19 p.m.30 views

CVE-2023-45721

Insufficient default configuration in HCL Leap allows anonymous access to directory information...

5.3CVSS7.1AI score0.00295EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/30 10:15 p.m.13 views

CVE-2023-45721

Insufficient default configuration in HCL Leap allows anonymous access to directory information...

5.3CVSS5.8AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/30 10:15 p.m.26 views

CVE-2023-45721

Insufficient default configuration in HCL Leap allows anonymous access to directory information...

5.3CVSS0.00295EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/30 9:13 p.m.66 views

CVE-2023-45721

CVE-2023-45721 concerns HCL Leap (and related references note HCL Domino Leap) with insufficient default configuration that permits anonymous access to directory information. Connected sources corroborate the issue in HCL Leap, describe it as a disclosure of private information due to misconfigur...

5.3CVSS5.2AI score0.00295EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/30 9:13 p.m.26 views

CVE-2023-45721 HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability

Insufficient default configuration in HCL Leap allows anonymous access to directory information...

5.3CVSS0.00295EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/30 12:00 a.m.9 views

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from an inadequate default configuration that could lead to anonymous access to directory information...

5.3CVSS6.6AI score0.00295EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/30 12:00 a.m.11 views

PT-2025-18335 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to insufficient default configuration in HCL Leap, which allows anonymous access to directory information. Recommendations: At the moment, there is no information abou...

5.3CVSS6AI score0.00295EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
added 2025/04/28 12:00 a.m.24 views

Security of a Secret Sharing Protocol on the Qline

Secret sharing is a fundamental primitive in cryptography, and it can be achieved even with perfect security. However, the distribution of shares requires computational assumptions, which can compromise the overall security of the protocol. While traditional Quantum Key Distribution QKD can...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/04/26 5:57 p.m.30 views

CVE-2023-45720

Insufficient default configuration in HCL Leap allows anonymous access to directory information...

5.3CVSS6.9AI score0.00295EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/04/25 3:31 p.m.21 views

Moodle reveals student identities through assignment submissions search on anonymous submissions

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

4.3CVSS7AI score0.00309EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder