Lucene search
+L

987 matches found

Positive Technologies
Positive Technologies
•added 2019/12/27 12:00 a.m.•4 views

PT-2019-5789

Name of the Vulnerable Software and Affected Versions CDATA versions 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN,...

10CVSS0.01477EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2019/11/29 12:00 a.m.•5 views

PT-2019-20353

Уязвимость платформы для управления проектами OpenProject связана с непринятием мер по защите структуры веб-страницы при обработке значения target= blank без атрибута rel noopener. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить фишинг-атаки...

7.5CVSS5.8AI score
SaveExploits0References3
OSV
OSV
•added 2019/11/27 6:15 p.m.•18 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS6.5AI score
SaveExploits0References10
OSV
OSV
•added 2019/11/27 6:15 p.m.•19 views

DEBIAN-CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.4AI score0.00482EPSS
SaveExploits1References1
NVD
NVD
•added 2019/11/27 6:15 p.m.•28 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.5AI score0.00482EPSS
SaveExploits1References6
Prion
Prion
•added 2019/11/27 6:15 p.m.•29 views

Authentication flaw

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

4.6CVSS6.8AI score0.00482EPSS
SaveExploits1References6Affected Software2
UbuntuCve
UbuntuCve
•added 2019/11/27 6:15 p.m.•33 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.1AI score0.00482EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2019/11/27 5:28 p.m.•36 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS4.9AI score0.00482EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2019/11/27 12:00 a.m.•8 views

PT-2019-6638

Name of the Vulnerable Software and Affected Versions xscreensaver versions prior to 5.14 Description The issue allows local attackers to access resources without authentication due to xscreensaver crashing during activation and leaving the screen unlocked when in Blank Only Mode and when DPMS is...

7.8CVSS0.00482EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/27 12:00 a.m.•4 views

CVE-2011-2187: Missing Authentication for Critical Function

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.3AI score0.00482EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
•added 2019/10/15 12:00 a.m.•22 views

October 15, 2019—KB4520062 (OS Build 17763.832)

None None...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2019/09/16 12:00 a.m.•175 views

docPrint Pro 8.0 SEH Buffer Overflow

import struct Title: docPrint Pro v8.0 'User/Master Password' Local SEH Alphanumeric Encoded Buffer Overflow Date: September 14th, 2019 Author: Connor McGarr @33y0re https://connormcgarr.github.io Vendor Homepage: http://www.verypdf.com Software Link: http://dl.verypdf.net/docprintprosetup.exe...

0.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/09/16 12:00 a.m.•219 views

docPrint Pro 8.0 - SEH Buffer Overflow

import struct Title: docPrint Pro v8.0 'User/Master Password' Local SEH Alphanumeric Encoded Buffer Overflow Date: September 14th, 2019 Author: Connor McGarr @33y0re https://connormcgarr.github.io Vendor Homepage: http://www.verypdf.com Software Link: http://dl.verypdf.net/docprintprosetup.exe...

5.3AI score
SaveExploits0
NVD
NVD
•added 2019/09/08 8:15 p.m.•36 views

CVE-2019-16109

An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmationtoken, if a database record has a blank value in the confirmationtoken column. However, there is no scenario within Devise itself in which such database records wou...

5.3CVSS5.2AI score0.01832EPSS
SaveExploits0References3
OSV
OSV
•added 2019/09/08 8:15 p.m.•14 views

UBUNTU-CVE-2019-16109

An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmationtoken, if a database record has a blank value in the confirmationtoken column. However, there is no scenario within Devise itself in which such database records wou...

5.3CVSS5.8AI score0.01832EPSS
SaveExploits0References5
Mend
Mend
•added 2019/09/08 7:57 p.m.•2 views

CVE-2019-16109

An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmationtoken, if a database record has a blank value in the confirmationtoken column. However, there is no scenario within Devise itself in which such database records wou...

6.9CVSS0.01832EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/08 12:00 a.m.•6 views

CVE-2019-16109: Undefined Security Weakness

An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmationtoken, if a database record has a blank value in the confirmationtoken column. However, there is no scenario within Devise itself in which such database records wou...

5.3CVSS6AI score0.01832EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2019/08/30 12:00 a.m.•13 views

August 30, 2019—KB4512941 (OS Build 18362.329)

None None...

6.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2019/07/29 12:00 a.m.•93 views

D-Link DIR-655 Rev. C < 3.02B05 Multiple Vulnerabilities

D-Link DIR-655 Rev. C devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.8AI score0.08433EPSS
SaveExploits4References2
NVD
NVD
•added 2019/07/11 3:15 p.m.•36 views

CVE-2019-13560

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the applysec.cgi setupwizard parameter...

9.8CVSS9.6AI score0.03577EPSS
SaveExploits1References3
Rows per page
Query Builder