Lucene search
+L

5 matches found

VulnCheck KEV
VulnCheck KEV
added 2023/02/14 12:0 a.m.13 views

VulnCheck KEV: CVE-2021-33558

Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not...

7.5CVSS7.3AI score0.12307EPSS
Exploits2References1
OSV
OSV
added 2021/05/27 11:15 a.m.8 views

CVE-2021-33558

Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not par...

7.5CVSS5.8AI score0.12307EPSS
Exploits2References3
CNNVD
CNNVD
added 2021/05/27 12:0 a.m.7 views

Boa 信息泄露漏洞

Boa is an open source code for embedded applications from Boa Open Source. An information disclosure vulnerability exists in Boa version 0.94.13, which allows remote attackers to obtain sensitive information via misconfiguration...

7.5CVSS7.8AI score0.12307EPSS
Exploits2References5
CNVD
CNVD
added 2021/01/21 12:0 a.m.8 views

Skyworth Gn542vf Information Disclosure Vulnerability

Skyworth Gn542vf is an Internet TV device from Skyworth, a Chinese company. A security vulnerability exists in Skyworth GN542VF Boa version 0.94.13, which can be exploited by an attacker to capture session cookies...

7.5CVSS6.7AI score0.0151EPSS
Exploits0References1
Prion
Prion
added 2021/01/14 4:15 p.m.11 views

Session fixation

SKYWORTH GN542VF Boa version 0.94.13 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session...

5CVSS7.3AI score0.0151EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder