Lucene search
+L

9480 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/20 12:00 a.m.•9 views

CVE-2013-6975: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

4.6CVSS6AI score0.00517EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/05/20 12:00 a.m.•11 views

PT-2014-3238

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description A directory traversal issue in the command-line interface allows local users to read arbitrary files via unspecified input. Recommendations For Cisco NX-OS versions 6.22a and earlier, at the...

4.6CVSS0.00517EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2014/05/12 12:00 a.m.•36 views

Fedora Update for fish FEDORA-2014-5794

Check for the Version of fish OpenVAS Vulnerability Test Fedora Update for fish FEDORA-2014-5794 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

6.9CVSS8.4AI score0.0319EPSS
SaveExploits0References2
Fedora
Fedora
•added 2014/05/08 10:07 a.m.•47 views

[SECURITY] Fedora 19 Update: fish-2.1.0-9.fc19

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

9.8CVSS1.1AI score0.0319EPSS
SaveExploits0
Fedora
Fedora
•added 2014/05/06 3:36 a.m.•50 views

[SECURITY] Fedora 20 Update: fish-2.1.0-9.fc20

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

9.8CVSS1.1AI score0.0319EPSS
SaveExploits0
NVD
NVD
•added 2014/05/02 1:59 a.m.•45 views

CVE-2013-7110

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...

4.3CVSS6.3AI score0.00835EPSS
SaveExploits0References3
PyPA
PyPA
•added 2014/05/02 1:59 a.m.•17 views

PYSEC-2014-72

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...

4.3CVSS7AI score0.00835EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2014/05/02 1:00 a.m.•63 views

CVE-2013-2073

Removed by vendor...

4.3CVSS5.8AI score0.00821EPSS
SaveExploits0
Mend
Mend
•added 2014/05/02 1:00 a.m.•6 views

CVE-2013-2073

Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate...

6.3CVSS0.00821EPSS
SaveExploits0References3
Mend
Mend
•added 2014/05/02 1:00 a.m.•4 views

CVE-2013-7110

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...

6.3CVSS0.00835EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2014/05/02 12:00 a.m.•4 views

PT-2014-2544

Name of the Vulnerable Software and Affected Versions Transifex command-line client versions prior to 0.9 Description The issue concerns a failure to validate X.509 certificates, allowing man-in-the-middle attackers to spoof a Transifex server by using an arbitrary certificate. Recommendations Fo...

4.3CVSS0.00821EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/02 12:00 a.m.•8 views

CVE-2013-2073: Improper Input Validation

Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate...

4.3CVSS5.9AI score0.00821EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/05/02 12:00 a.m.•5 views

PT-2014-3263

Name of the Vulnerable Software and Affected Versions Transifex Command-line Client versions prior to 0.10 Description The issue allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate because it does not validate X.509 certificates for data transfer connection...

8.7CVSS0.00835EPSS
SaveExploits0References18
OpenVAS
OpenVAS
•added 2014/05/02 12:00 a.m.•30 views

Fedora Update for wireshark FEDORA-2014-5514

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2014-5514 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

4.3CVSS7.5AI score0.02094EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/02 12:00 a.m.•8 views

CVE-2013-7110: Improper Input Validation

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...

4.3CVSS6AI score0.00835EPSS
SaveExploits0References2
Cisco
Cisco
•added 2014/04/30 4:19 p.m.•82 views

Cisco TelePresence TC and TE Software u-boot Buffer Overflow Vulnerability

A vulnerability in the implementation of executable utilities that use the universal bootloader u-boot compiler of Cisco TelePresence TC and TE Software could allow an authenticated, local attacker to create a buffer overflow and possibly execute arbitrary code on the affected system. The...

6.6CVSS7.9AI score0.00339EPSS
SaveExploits0References1
NVD
NVD
•added 2014/04/30 2:22 p.m.•31 views

CVE-2013-6990

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

9CVSS7AI score0.01091EPSS
SaveExploits2References2
Prion
Prion
•added 2014/04/30 2:22 p.m.•28 views

Design/Logic Flaw

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

9CVSS7.5AI score0.01091EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2014/04/30 2:00 p.m.•43 views

CVE-2013-6990

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

7AI score0.01091EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2014/04/30 1:59 a.m.•28 views

OWASP ZAP v2.3.0 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

OWASP Zed Attack Proxy ZAP An easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing...

7.8AI score
SaveExploits0
Rows per page
Query Builder