Lucene search
+L

197 matches found

Prion
Prion
•added 2023/11/21 7:15 p.m.•30 views

Design/Logic Flaw

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

4.3CVSS6.9AI score0.00187EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/21 6:49 p.m.•92 views

CVE-2023-20274

CVE-2023-20274 affects Cisco AppDynamics PHP Agent. The issue arises from insufficient permissions set by the PHP Agent Installer on the install directory, enabling a locally authenticated attacker to modify installer-owned objects and execute with PHP privileges, potentially elevating to root on...

7.8CVSS7.4AI score0.00187EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/21 6:49 p.m.•60 views

CVE-2023-20274

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

6.3CVSS7.7AI score0.00187EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/21 12:00 a.m.•6 views

CVE-2023-20274: Improper Privilege Management

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

7.8CVSS6.8AI score0.00187EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/21 12:00 a.m.•24 views

Cisco AppDynamics PHP Agent security vulnerability

Cisco AppDynamics PHP Agent is an agent program from Cisco USA for monitoring the performance of PHP applications. An elevation of privilege vulnerability exists in the Cisco AppDynamics PHP Agent that stems from insufficient privileges being set on the PHP Agent installation directory. An attack...

7.8CVSS7.2AI score0.00187EPSS
SaveExploits0References2
Cisco
Cisco
•added 2023/11/15 4:00 p.m.•49 views

Cisco AppDynamics PHP Agent Privilege Escalation Vulnerability

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

6.3CVSS6.7AI score0.00187EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/15 12:00 a.m.•15 views

PT-2023-7109 · Cisco · Cisco Appdynamics Php Agent

Name of the Vulnerable Software and Affected Versions: Cisco AppDynamics PHP Agent affected versions not specified Description: The issue is related to incorrect permission assignment in the installer script of the Cisco AppDynamics PHP Agent. This could allow an authenticated, local attacker to...

7.8CVSS6.7AI score0.00187EPSS
SaveExploits0References7
vulnersOsv
vulnersOsv
•added 2023/06/14 3:30 p.m.•4 views

net.praqma:memory-map (>=0.1.0, <=0.1.2), org.jenkins-ci.main:jenkins-test-harness (1.484) +7 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.484)

org.jenkins-ci.main:jenkins-core MAVEN version 1.484 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =0.1.0, =0.36, =0.37 - org.jenkins-ci.plugins:viewvc 1.7 Source cves:...

8CVSS0.0086EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2023/06/14 3:30 p.m.•3 views

org.jenkins-ci.main:jenkins-test-harness (1.570), org.jenkins-ci.main:jenkins-war (1.570) +6 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.570)

org.jenkins-ci.main:jenkins-core MAVEN version 1.570 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.570 - org.jenkins-ci.main:jenkins-war 1.570 -...

8CVSS0.0086EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2023/03/10 9:30 p.m.•3 views

org.jenkins-ci.main:jenkins-test-harness (1.570), org.jenkins-ci.main:jenkins-war (1.570) +6 more potentially affected by CVE-2023-27900 via org.jenkins-ci.main:jenkins-core (1.570)

org.jenkins-ci.main:jenkins-core MAVEN version 1.570 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.570 - org.jenkins-ci.main:jenkins-war 1.570 -...

7.5CVSS0.0098EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2023/03/10 9:30 p.m.•3 views

org.jenkins-ci.main:jenkins-test-harness (1.570), org.jenkins-ci.main:jenkins-war (1.570) +6 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.570)

org.jenkins-ci.main:jenkins-core MAVEN version 1.570 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.570 - org.jenkins-ci.main:jenkins-war 1.570 -...

5.3CVSS0.00724EPSS
SaveExploits0
Snyk
Snyk
•added 2023/02/21 8:16 a.m.•6 views

Malicious Package

Overview appdynamics-native is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:36 p.m.•3 views

Malicious Package

Overview appdynamics-libagent-napi is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•3 views

Malicious Package

Overview appdynamics-libagent is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•10 views

Malicious Package

Overview appdynamics-zmq is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•12 views

Malicious Package

Overview appdynamics-protobuf is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/07/04 12:00 a.m.•20 views

Cisco AppDynamics Controller Disclosure Privilege Escalation

The vulnerability of the Cisco AppDynamics Controller’s software management web interface is related to improper authentication checks for HTTP requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information and enhance their privileges through a specially...

5.3CVSS5.8AI score0.01061EPSS
SaveExploits0References4Affected Software1
vulnersOsv
vulnersOsv
•added 2022/06/24 12:00 a.m.•3 views

org.jenkins-ci.main:jenkins-test-harness (1.570), org.jenkins-ci.main:jenkins-war (1.570) +6 more potentially affected by CVE-2022-34171 via org.jenkins-ci.main:jenkins-core (1.570)

org.jenkins-ci.main:jenkins-core MAVEN version 1.570 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.570 - org.jenkins-ci.main:jenkins-war 1.570 -...

5.4CVSS0.01557EPSS
SaveExploits0
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•193 views

Cisco AppDynamics Controller Authorization Issues Vulnerability

Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. Cisco AppDynamics Controller suffers from an authorization issue vulnerability that arises from incorrect authorizatio...

5.3CVSS7AI score0.01061EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/06/15 6:15 p.m.•15 views

CVE-2022-20736

A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access. This...

5.3CVSS5.8AI score0.01061EPSS
SaveExploits0References1
Rows per page
Query Builder