7617 matches found
DoD Cloud Computing Impact Level 6 – the unclassified edition
The final Impact Level IL referenced in the Department of Defense DoD Cloud Computing CC Security Requirements Guide SRG is IL6. IL6 allows Cloud Service Providers CSPs to store information up to SECRET or below. CSPs can utilize their own infrastructure or deploy their cloud service offering CSO...
F5 BIG-IP APM资源管理错误漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 BIG IP APM OCSP denial of service vulnerability can be exploited by attackers to cause a denial of service DoS on the...
CVE-2021-21600
Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path...
CVE-2013-6276
QNAP FVioCard 2312 and FVioGate 2308 have hardcoded entries in authorizedkeys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models...
CVE-2013-6276
QNAP FVioCard 2312 and FVioGate 2308 have hardcoded entries in authorizedkeys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models...
PT-2021-8376 · Qnap · Qnap F Viocard 2312 +1
Name of the Vulnerable Software and Affected Versions: QNAP F VioCard 2312 affected versions not specified QNAP F VioGate 2308 affected versions not specified Description: The issue concerns hardcoded entries in authorized keys files. It is noted that all active models are not affected, and the...
UBUNTU-CVE-2021-38173
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using sshfilterbtrbk.sh in authorizedkeys...
CVE-2021-38173
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using sshfilterbtrbk.sh in authorizedkeys...
btrbk 命令注入漏洞
btrbk is a software application. A backup tool for btrfs subvolumes that utilizes btrfs-specific features to create atomic snapshots and incrementally transfer them to your backup location. btrbk has a security vulnerability. Btrbk before 0.31.2 allows command execution due to error handling of S...
PT-2021-21982
Name of the Vulnerable Software and Affected Versions: Btrbk versions prior to 0.31.2 Description: The issue allows command execution due to the mishandling of remote hosts filtering SSH commands using ssh filter btrbk.sh in authorized keys. Recommendations: For versions prior to 0.31.2, update t...
Atlassian Confluence Server 安全漏洞
Atlassian Confluence Server is the server version of a suite of collaboration software from Atlassian Australia with enterprise knowledge management capabilities and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server that allows remote attackers t...
IBM i2 Analyze input validation vulnerability
IBM i2 Analyze is an integrated set of security services and stores from IBM USA that provides authorized users with search, analysis and storage of intelligence data. a security vulnerability exists in IBM i2 Analyze that allows authenticated users to perform unauthorized actions due to dangerou...
Exploit for CVE-2020-14882
CVE-2020-14882ALL CVE-2020-14882ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。 需要模块：requests、http.client （工具仅用于授权的安全测试，请勿用于非法使用，违规行为与作者无关。） 选项 功能一：命令回显 python3 CVE-2020-14882ALL.py -u http://1.1.1.1:7001 -c "net user" python3 CVE-2020-14882ALL.py -u http://1.1.1.1:7001 -c "whoami" 功能二：批量命令回显 python3...
CVE-2020-21932
A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid...
Deployer backdoors in DAOVault, Router and SynthVault contracts
Handle 0xRajeev Vulnerability details Impact The contracts use an access control pattern where the contract deployer is included in the onlyDAO modifier which is used for authorized access to critical functions. Such contracts also include a purgeDeployer function which renounces sets to...
CVE-2020-21932: Improper Authentication
A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid...
CVE-2021-21600
Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path...
CVE-2020-24146
Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...