Lucene search
+L

15882 matches found

NVD
NVD
added 2023/05/04 9:15 p.m.32 views

CVE-2023-21490

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

7.1CVSS5.2AI score0.00128EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/04 9:15 p.m.18 views

Improper access control

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

3.2CVSS6.7AI score0.00128EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/04 12:00 a.m.12 views

CVE-2023-21490

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

4.7CVSS6.8AI score0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/04 12:00 a.m.37 views

CVE-2023-21490

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager...

4.7CVSS7AI score0.00128EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2023/05/02 11:40 a.m.3 views

Why Telecoms Struggle with SaaS Security

The telecom industry has always been a tantalizing target for cybercriminals. The combination of interconnected networks, customer data, and sensitive information allows cybercriminals to inflict maximum damage through minimal effort. It's the breaches in telecom companies that tend to have a...

6.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/05/02 11:40 a.m.28 views

Why Telecoms Struggle with SaaS Security

The telecom industry has always been a tantalizing target for cybercriminals. The combination of interconnected networks, customer data, and sensitive information allows cybercriminals to inflict maximum damage through minimal effort. It's the breaches in telecom companies that tend to have a...

6.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/05/02 12:00 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2023:2077-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.27076EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2023/05/02 12:00 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2023:2078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.27076EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2023/05/01 3:30 p.m.32 views

Apache StreamPark LDAP Injection vulnerability

Apache StreamPark versions 1.0.0 to 2.0.0 have an LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements...

5.4CVSS6.8AI score0.01103EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/05/01 3:15 p.m.23 views

CVE-2022-45801

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

5.4CVSS6.2AI score0.01103EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/01 2:50 p.m.41 views

CVE-2022-45801 Apache StreamPark (incubating): LDAP Injection Vulnerability

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

6.4AI score0.01103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/01 2:50 p.m.11 views

CVE-2022-45801 Apache StreamPark (incubating): LDAP Injection Vulnerability

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

8.1AI score0.01103EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/01 2:50 p.m.8 views

CVE-2022-45801 Apache StreamPark (incubating): LDAP Injection Vulnerability

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements through...

6.1AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2023/05/01 12:00 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2023:2068-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.4AI score0.00428EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/05/01 12:00 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2023:2069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.4AI score0.00428EPSS
SaveExploits1References4
Krebs on Security
Krebs on Security
added 2023/04/28 2:09 a.m.33 views

Many Public Salesforce Sites are Leaking Private Data

A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows an...

6.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/04/28 12:00 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2023:2051-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.05552EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2023/04/27 12:00 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2023:2048-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.8AI score0.03753EPSS
SaveExploits6References8
NVD
NVD
added 2023/04/26 9:15 p.m.23 views

CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

6.1CVSS6.3AI score0.0941EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/26 9:15 p.m.9 views

CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

6.1CVSS5.8AI score0.0941EPSS
SaveExploits0References1
Rows per page
Query Builder