Lucene search
+L

247 matches found

zdt
zdt
•added 2017/07/08 12:00 a.m.•65 views

Apache Solar 5.5.4 / 6.5.1 Member Spoofing Vulnerability

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious...

5CVSS7.5AI score0.05632EPSS
SaveExploits1
Prion
Prion
•added 2017/07/07 7:29 p.m.•18 views

Authentication flaw

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious...

5CVSS7.5AI score0.05632EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2017/07/07 7:00 p.m.•60 views

CVE-2017-7660

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious...

7.5CVSS7.5AI score0.05632EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2014/09/12 12:00 a.m.•54 views

MySQL 5.6.x < 5.6.20 Multiple Vulnerabilities (October 2014 CPU)

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.20. It is, therefore, affected by errors in the following components : - CLIENT:MYSQLADMIN - CLIENT:MYSQLDUMP - SERVER:CHARACTER SETS - SERVER:DML - SERVER:MEMORY STORAGE ENGINE - SERVER:MyISAM - SERVER:PRIVILEGES...

7.4CVSS7.5AI score0.95326EPSS
SaveExploits12References16
UbuntuCve
UbuntuCve
•added 2014/07/29 11:10 a.m.•28 views

CVE-2014-3552

The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a session ID is empty, which allows remote authenticated users to hijack sessions via crafted plugin interaction...

6CVSS5.9AI score0.01165EPSS
SaveExploits0References3
CVE
CVE
•added 2014/07/29 10:00 a.m.•69 views

CVE-2014-3552

The CVE-2014-3552 entry concerns Moodle’s Shibboleth authentication plugin (auth/shibboleth/index.php). It affects Moodle versions up to 2.3.11, 2.4.x prior to 2.4.11, and 2.5.x prior to 2.5.7, where the plugin fails to check for an empty session ID. This allows remote authenticated users to hija...

6CVSS6.3AI score0.01165EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2013/01/08 12:00 a.m.•22 views

Fedora Update for dovecot FEDORA-2012-19752

Check for the Version of dovecot OpenVAS Vulnerability Test Fedora Update for dovecot FEDORA-2012-19752 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6.7AI score
SaveExploits0References2
Rows per page
Query Builder