Lucene search
+L

18108 matches found

vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•1 views

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2018-1000195 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2018-1000195...

4.3CVSS0.02036EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•1 views

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2018-6356 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2018-6356...

6.5CVSS0.03855EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•0 views

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2018-1999001...

8.8CVSS0.18116EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•3 views

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2018-1000861...

10CVSS0.98326EPSS
SaveExploits7
vulnersOsv
vulnersOsv
•added 2022/05/13 1:00 a.m.•1 views

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2018-1999003...

4.3CVSS0.00759EPSS
SaveExploits0
Malwarebytes
Malwarebytes
•added 2022/05/12 10:21 a.m.•43 views

College closes down after ransomware attack

Lincoln College, one of the few rural schools in Illinois, said that it will permanently close on Friday, May 13, after 157 years, partly due to the impacts of the COVID-19 pandemic and partly due to a long recovery after a ransomware attack in December 2021. The institution notified the Illinois...

0.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/05/12 7:00 a.m.•341 views

May 10, 2022—KB5013952 (OS Build 14393.5125) - EXPIRED

None None...

9.8CVSS6.8AI score0.75974EPSS
SaveExploits3
NVD
NVD
•added 2022/05/11 12:15 p.m.•24 views

CVE-2020-19228

An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files...

9CVSS0.01244EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/11 12:15 p.m.•21 views

Design/Logic Flaw

An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files...

9CVSS7AI score0.01244EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/05/11 12:00 p.m.•38 views

CVE-2020-19228

An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files...

7AI score0.01244EPSS
SaveExploits1References1
CVE
CVE
•added 2022/05/11 12:00 p.m.•71 views

CVE-2020-19228

The CVE-2020-19228 entry concerns Bludit v3.13.0, where an unsafe backup-plugin implementation allows attackers to upload arbitrary files. The vulnerability is described with high severities in CVSS terms (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) across both CVSSv3.1 and CVSSv2, indicating network-ex...

9CVSS7AI score0.01244EPSS
SaveExploits1References1Affected Software1
wpexploit
wpexploit
•added 2022/05/11 12:00 a.m.•134 views

Database Backup for WordPress < 2.5.2 - Arbitrary Schedule Settings Update via CSRF

The plugin does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails to themselves, which contain more details. O...

5.8CVSS1AI score0.00419EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2022/05/11 12:00 a.m.•18 views

PT-2022-8599

Name of the Vulnerable Software and Affected Versions bludit version 3.13.0 Description An issue was found in the unsafe implementation of the backup plugin, allowing attackers to upload arbitrary files. Recommendations For bludit version 3.13.0, consider disabling the backup plugin until a patch...

9CVSS7AI score0.01244EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/05/11 12:00 a.m.•19 views

Bludit code issues and vulnerabilities

Bludit is an open source, lightweight blog content management system CMS. A security vulnerability exists in Bludit version 3.13.0, which stems from an insecure backup plugin that can be exploited by an attacker to upload arbitrary files...

9CVSS7.2AI score0.01244EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
•added 2022/05/11 12:00 a.m.•19 views

Database Backup for WordPress < 2.5.2 - Arbitrary Schedule Settings Update via CSRF

The plugin does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails to themselves, which contain more details. O...

5.8CVSS3.2AI score0.00419EPSS
SaveExploits2Affected Software1
Patchstack
Patchstack
•added 2022/05/11 12:00 a.m.•65 views

WordPress Database Backup for WordPress plugin <= 2.5.1 - Arbitrary Schedule Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Schedule Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Daniel Ruf in WordPress Database Backup for WordPress plugin versions = 2.5.1. Solution Update the WordPress Database Backup for WordPress plugin to the latest available version at least 2.5.2...

5.8CVSS4AI score0.00419EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/11 12:00 a.m.•9 views

CVE-2020-19228: Unrestricted Upload of File with Dangerous Type

An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files...

9CVSS7.2AI score0.01244EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/05/11 12:00 a.m.•63 views

WordPress Migration, Backup, Staging - WPvivid Plugin < 0.9.71 Arbitrary File Read Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

7.5CVSS7.7AI score0.01502EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/05/10 12:00 a.m.•19 views

Microsoft Windows BitLocker security feature vulnerability

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security feature issue vulnerability exists in Microsoft Windows BitLocker. The following products and editions are affected:Windows 10 Version 21H1 for...

4.2CVSS6.5AI score0.00858EPSS
SaveExploits0References5
Metasploit
Metasploit
•added 2022/05/10 12:00 a.m.•201 views

VMware vCenter Extract Secrets from vmdir / vmafd DB File

Grab certificates from the vCenter server vmdird and vmafd database files and adds them to loot. The vmdird MDB database file can be found on the live appliance under the path /storage/db/vmware-vmdir/data.mdb, and the DB vmafd is under path /storage/db/vmware-vmafd/afd.db. The vmdir database...

5.4AI score
SaveExploits0
Rows per page
Query Builder