Lucene search
+L

1015 matches found

OSV
OSV
added 2022/03/21 6:15 p.m.7 views

CVE-2022-24236

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts...

3.5CVSS5.8AI score
SaveExploits0References2
NVD
NVD
added 2022/03/21 6:15 p.m.19 views

CVE-2022-24236

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts...

3.5CVSS0.0055EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/21 6:15 p.m.6 views

CVE-2022-24237

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability. This vulnerability allows authenticated attackers to execute arbitrary commands...

8.8CVSS7.5AI score0.25339EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/21 6:15 p.m.20 views

CVE-2022-24237

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability. This vulnerability allows authenticated attackers to execute arbitrary commands...

8.8CVSS0.25339EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/21 6:15 p.m.6 views

CVE-2022-24235

A Cross-Site Request Forgery CSRF in the management portal of Snapt Aria v12.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors...

8.8CVSS7.7AI score0.00677EPSS
SaveExploits1References3
Prion
Prion
added 2022/03/21 6:15 p.m.17 views

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in the management portal of Snapt Aria v12.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors...

6.8CVSS9AI score0.00677EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2022/03/21 6:15 p.m.23 views

Command injection

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability. This vulnerability allows authenticated attackers to execute arbitrary commands...

6.5CVSS9.1AI score0.25339EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2022/03/21 6:15 p.m.15 views

Design/Logic Flaw

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts...

3.5CVSS4.2AI score0.0055EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/21 5:24 p.m.36 views

CVE-2022-24235

A Cross-Site Request Forgery CSRF in the management portal of Snapt Aria v12.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors...

9.3AI score0.00677EPSS
SaveExploits1References2
CVE
CVE
added 2022/03/21 5:24 p.m.99 views

CVE-2022-24235

CVE-2022-24235 describes a Cross-Site Request Forgery in the management portal of Snapt Aria v12.8 that allows attackers to escalate privileges and execute arbitrary code via unspecified vectors. The available connected documents reiterate this vulnerability and its impact but do not provide conc...

8.8CVSS9AI score0.00677EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/21 5:24 p.m.23 views

CVE-2022-24236

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts...

4.5AI score0.0055EPSS
SaveExploits1References2
CVE
CVE
added 2022/03/21 5:24 p.m.83 views

CVE-2022-24236

CVE-2022-24236 : In Snapt Aria v12.8, an insecure permissions issue allows unauthenticated attackers to send emails from spoofed user accounts. The connected sources corroborate the vulnerability and its impact to email abuse, but do not provide concrete remediation details (patch versions/workar...

3.5CVSS4.3AI score0.0055EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/21 5:24 p.m.23 views

CVE-2022-24237

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability. This vulnerability allows authenticated attackers to execute arbitrary commands...

9.3AI score0.25339EPSS
SaveExploits1References2
CVE
CVE
added 2022/03/21 5:24 p.m.95 views

CVE-2022-24237

CVE-2022-24237 affects Snapt Aria v12.8’s snaptPowered2 component. A command-injection vulnerability allows authenticated attackers to execute arbitrary commands. Documented impact is that this can lead to remote command execution with elevated risk (CVSSv3.1: 8.8, HIGH; network access, low privi...

8.8CVSS9AI score0.25339EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.7 views

Snapt Aria 跨站请求伪造漏洞

Snapt Aria is an enterprise ADC solution from Snapt USA that provides a load balancer, web gas pedal, web application firewall WAF, global server load balancer GSLB, etc. A cross-site request forgery vulnerability exists in Snapt Aria version 12.8, which stems from a WEB application that does not...

8.8CVSS6AI score0.00677EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.8 views

Snapt Aria 操作系统命令注入漏洞

Snapt Aria is an enterprise-oriented ADC solution from Snapt USA that provides a load balancer, Web gas pedal, Web Application Firewall WAF, Global Server Load Balancer GSLB, etc. A command injection vulnerability exists in the snaptPowered2 component of Snapt Aria v12.8, which could be exploited...

8.8CVSS6.1AI score0.25339EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/03/21 12:0 a.m.9 views

PT-2022-16554 · Snapt · Snapt Aria

Name of the Vulnerable Software and Affected Versions: Snapt Aria version 12.8 Description: The snaptPowered2 component of Snapt Aria contains a command injection issue, allowing authenticated attackers to execute arbitrary commands. Recommendations: For Snapt Aria version 12.8, consider...

8.8CVSS9AI score0.25339EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.7 views

Snapt Aria安全漏洞

Snapt Aria is an enterprise ADC solution from Snapt USA that provides a load balancer, web gas pedal, web application firewall WAF, global server load balancer GSLB, etc. A security vulnerability exists in Snapt Aria v12.8, which could be exploited by an unauthenticated attacker to send emails fr...

3.5CVSS5.6AI score0.0055EPSS
SaveExploits1References3
Microsoft KB
Microsoft KB
added 2022/01/11 8:0 a.m.78 views

Description of the security update for SharePoint Server Subscription Edition: January 11, 2022 (KB5002111)

None None...

9CVSS7.1AI score0.02763EPSS
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/07 3:5 p.m.20 views

ariacybersecurity.com Cross Site Scripting vulnerability OBB-2135055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Rows per page
Query Builder