Lucene search
K

31234 matches found

Tenable Nessus
Tenable Nessus
added 2023/12/20 12:0 a.m.38 views

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current proftpd Vulnerability (SSA:2023-354-01)

The version of proftpd installed on the remote host is prior to 1.3.8b. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-354-01 advisory. - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attacker...

5.9CVSS7.1AI score0.93305EPSS
Exploits4References2
SUSE CVE
SUSE CVE
added 2023/12/19 12:6 a.m.2 views

SUSE CVE-2023-48795

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

5.9CVSS7.1AI score0.93305EPSS
Exploits4References77
Tenable Nessus
Tenable Nessus
added 2023/12/19 12:0 a.m.41 views

Jira Server/Data Center Limited Remote File Read (CVE-2021-26086)

Binary data jiracve-2021-26086.nbin...

5.3CVSS5.7AI score0.99999EPSS
Exploits6References2
Tenable Nessus
Tenable Nessus
added 2023/12/19 12:0 a.m.172 views

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : OpenSSH vulnerabilities (USN-6560-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6560-1 advisory. Fabian Bumer, Marcus Brinkmann, Jrg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If...

9.8CVSS7AI score0.93305EPSS
Exploits4References3
OSV
OSV
added 2023/12/18 4:15 p.m.10 views

AZL-45123 CVE-2023-48795 affecting package trilead-ssh2 217.371.vc1d30dc5a_b_32-1

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

5.9CVSS6.9AI score0.93305EPSS
Exploits4References1
OSV
OSV
added 2023/12/18 4:15 p.m.4 views

AZL-32229 CVE-2023-48795 affecting package terraform for versions less than 1.3.2-25

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

5.9CVSS6.7AI score0.93305EPSS
Exploits4References1
Cvelist
Cvelist
added 2023/12/18 10:18 a.m.22 views

CVE-2023-49855 WordPress BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter Plugin <= 1.49.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3...

6.5CVSS8.9AI score0.00321EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/12/18 10:18 a.m.14 views

CVE-2023-49855 WordPress BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter Plugin <= 1.49.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3...

6.5CVSS7.2AI score0.00321EPSS
Exploits0References1
CVE
CVE
added 2023/12/18 10:18 a.m.73 views

CVE-2023-49855

CSRF vulnerability in BinaryCarpenter’s Menu Bar Cart Icon For WooCommerce (plugin by Binary Carpenter) affects versions up to 1.49.3. Root cause per CVE records: missing nonce validation enabling unauthenticated forged requests. Impact can include unauthorized actions on affected WordPress sites...

8.8CVSS8.5AI score0.00321EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/12/18 12:0 a.m.7 views

OwnCloud OwnCloud Installed (Linux)

Binary data owncloudowncloudnixinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/18 12:0 a.m.11 views

Rockwell FactoryTalk Product and Version Enumeration (Windows)

Binary data rockwellfactorytalkwinenuminstalls.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/18 12:0 a.m.16 views

Cisco Duo Authentication For Windows Logon And RDP Installed (Windows)

Binary data ciscoduowinlogoninstalled.nbin...

7.3AI score
Exploits0References1
CNNVD
CNNVD
added 2023/12/18 12:0 a.m.4 views

WordPress Plugin Menu Bar Cart Icon For WooCommerce By Binary Carpenter Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.4AI score0.00321EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/12/18 12:0 a.m.6 views

Datto RMM (Remote Monitoring and Management) Installed (Windows)

Binary data dattormmwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/18 12:0 a.m.83 views

Microsoft SharePoint Authentication Bypass (CVE-2023-29357)

Binary data microsoftsharepointcve-2023-29357.nbin...

9.8CVSS9.8AI score0.99618EPSS
Exploits10References4
Tenable Nessus
Tenable Nessus
added 2023/12/18 12:0 a.m.119 views

Amazon Linux 2 : openssh (ALAS-2023-2376)

The version of openssh installed on the remote host is prior to 7.4p1-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2376 advisory. AWS is aware of CVE-2023-48795, also known as Terrapin, which is found in the SSH protocol and affects SSH channel integrity. A...

5.9CVSS6.8AI score0.93305EPSS
Exploits4References4
Positive Technologies
Positive Technologies
added 2023/12/17 12:0 a.m.3 views

PT-2023-35652 · Git +1 · Binutils

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves functions such as memory bstat, bfd get size, and bfd get file...

6.9AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:0 a.m.7 views

IBM WebSphere Application Server Installed (Windows)

Binary data ibmwebsphereapplicationserverwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/14 12:0 a.m.17 views

Apple iOS < 16.7.3 Multiple Vulnerabilities (HT214034)

Binary data appleios1673check.nbin...

8.8CVSS7.3AI score0.17963EPSS
Exploits1References13
Tenable Nessus
Tenable Nessus
added 2023/12/14 12:0 a.m.4 views

Adobe Substance 3D Sampler Installed (macOS)

Binary data adobesubstance3dsamplermacosinstalled.nbin...

7.3AI score
Exploits0References1
Rows per page
Query Builder