Lucene search
+L

680 matches found

Cvelist
Cvelist
•added 2020/05/29 9:15 p.m.•49 views

CVE-2020-11844 Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

10CVSS9.3AI score0.02007EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/29 12:00 a.m.•7 views

CVE-2020-11844: Incorrect Authorization

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

10CVSS8.1AI score0.02007EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2020/02/05 12:00 a.m.•149 views

Verodin Director Web Console 3.5.4.0 Password Disclosure

Exploit Title: Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure PoC Discovery Date: 2019-01-31 Exploit Author: Nolan B. Kennedy nxkennedy Vendor Homepage: https://www.verodin.com/ Software Link : https://www.verodin.com/demo-request/demo-request-form Tested Versions...

4CVSS0.041EPSS
SaveExploits5
Exploit DB
Exploit DB
•added 2020/02/05 12:00 a.m.•441 views

Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)

Exploit Title: Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure PoC Discovery Date: 2019-01-31 Exploit Author: Nolan B. Kennedy nxkennedy Vendor Homepage: https://www.verodin.com/ Software Link : https://www.verodin.com/demo-request/demo-request-form Tested Versions...

7.7CVSS7.3AI score0.041EPSS
SaveExploits5
exploitpack
exploitpack
•added 2020/02/05 12:00 a.m.•140 views

Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)

Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure PoC Exploit Title: Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure PoC Discovery Date: 2019-01-31 Exploit Author: Nolan B. Kennedy nxkennedy Vendor Homepage: https://www.verodin.com/...

4CVSS0.3AI score0.041EPSS
SaveExploits5
CNVD
CNVD
•added 2019/12/18 12:00 a.m.•14 views

Micro Focus ArcSight Logger Cross-Site Request Forgery Vulnerability

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site request forgery vulnerability exists in Micro...

8.8CVSS6.8AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/17 11:15 p.m.•13 views

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

8.8CVSS7.3AI score0.00452EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/17 11:15 p.m.•29 views

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

8.8CVSS8.7AI score0.00452EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/17 11:15 p.m.•25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

6.8CVSS8.6AI score0.00452EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/12/17 10:05 p.m.•29 views

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

8.7AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
•added 2019/12/17 10:05 p.m.•66 views

CVE-2019-11657

Micro Focus ArcSight Logger has a Cross-Site Request Forgery (CSRF) vulnerability affecting all product versions prior to 7.0. The vulnerability arises from a web application that does not adequately validate request origins, enabling CSRF attacks without explicit user interaction in some sources...

8.8CVSS8.6AI score0.00452EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/17 12:00 a.m.•4 views

CVE-2019-11657: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

8.8CVSS7.8AI score0.00452EPSS
SaveExploits0References2
NVD
NVD
•added 2019/10/04 8:15 p.m.•32 views

CVE-2019-11655

Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File with Dangerous type...

8.8CVSS8.7AI score0.01513EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/04 8:15 p.m.•28 views

CVE-2019-11656

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.2AI score0.00644EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/04 8:15 p.m.•12 views

CVE-2019-11655

Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File with Dangerous type...

8.8CVSS7.3AI score0.01513EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/04 8:15 p.m.•15 views

CVE-2019-11656

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.1AI score0.00644EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/04 8:15 p.m.•22 views

Unrestricted file upload

Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File with Dangerous type...

6.5CVSS8.6AI score0.01513EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/04 8:15 p.m.•19 views

Cross site scripting

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.2AI score0.00644EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/10/04 7:16 p.m.•32 views

CVE-2019-11656

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.2AI score0.00644EPSS
SaveExploits0References1
CVE
CVE
•added 2019/10/04 7:16 p.m.•219 views

CVE-2019-11656

CVE-2019-11656 is a Stored XSS vulnerability in Micro Focus ArcSight Logger, affecting versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting. Public sources in the connected documents co...

5.4CVSS5.1AI score0.00644EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder