Lucene search
K

50 matches found

RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.1 views

CVE-2026-33771

A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentially take full control of the device. The password management menu enables the...

9.1CVSS5.7AI score0.00051EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.1 views

EUVD-2026-21193

A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentially take full control of the device. The password management menu enables the...

9.1CVSS5.8AI score0.00051EPSS
Exploits0References2
NVD
NVD
added 2026/04/09 10:16 p.m.1 views

CVE-2026-33771

A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentially take full control of the device. The password management menu enables the...

9.1CVSS0.00051EPSS
Exploits0References1
CVE
CVE
added 2026/04/09 9:33 p.m.13 views

CVE-2026-33771

CVE-2026-33771 affects Juniper CTP OS (CTP OS) and its password management function, where password complexity requirements configured in the admin menu are not saved, allowing weak passwords. This could enable an unauthenticated, network-based attacker to exploit weak local passwords and potenti...

9.1CVSS5.8AI score0.00051EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.2 views

PT-2026-31797

Name of the Vulnerable Software and Affected Versions Juniper Networks CTP OS versions 9.2R1 and 9.2R2 Description A Weak Password Requirements issue in the password management function may allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentiall...

9.1CVSS5.8AI score0.00051EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-5288

Malware in sbrugna...

8.8CVSS8.8AI score0.03063EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-2702

Malware in sbrugna...

10CVSS9.5AI score0.02058EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-33999

Malicious code in bioql PyPI...

9.8CVSS7.7AI score0.00066EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in pug-ctp-filter (npm)

The package pug-ctp-filter was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-30829 Malicious code in pug-ctp-filter (npm)

The package pug-ctp-filter was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 1:48 a.m.8 views

CVE-2023-2519

A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...

9.8CVSS7.4AI score0.00066EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/08/10 12:0 a.m.1 views

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP version 2.4174 suffers from a cross-site scripting vulnerability that stems from the...

6.1CVSS6.2AI score0.00123EPSS
Exploits0References3
NVD
NVD
added 2023/05/04 5:15 p.m.7 views

CVE-2023-2519

A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...

9.8CVSS8.1AI score0.00066EPSS
Exploits0References2
Prion
Prion
added 2023/05/04 5:15 p.m.6 views

Sql injection

A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...

7.5CVSS9.6AI score0.00066EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/05/04 4:31 p.m.61 views

CVE-2023-2519

CVE-2023-2519 affects Caton CTP Relay Server 1.2.9. The vulnerability resides in the API endpoint /server/api/v1/login, where improper handling of the username and password parameters enables remote SQL injection. The issue is exploitable remotely and is classified as critical, with multiple sour...

9.8CVSS8.8AI score0.00066EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/05/04 4:31 p.m.13 views

CVE-2023-2519 Caton CTP Relay Server API login sql injection

A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...

7.5CVSS9.9AI score0.00066EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/05/04 4:31 p.m.7 views

CVE-2023-2519 Caton CTP Relay Server API login sql injection

A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects unknown code of the file /server/api/v1/login of the component API. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...

7.5CVSS7.4AI score0.00066EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/05/04 12:0 a.m.1 views

Caton Technology CTP Relay Server SQL注入漏洞

Caton Technology CTP Relay Server is a TS stream management platform from Caton Technology, China. Designed to handle complex video routing, real-time status, a built-in TS analyzer and stream-level monitoring alerts, it provides network operators with continuous information about bandwidth,...

9.8CVSS7.7AI score0.00066EPSS
Exploits0References3
OSV
OSV
added 2021/10/18 2:15 p.m.1 views

CVE-2021-24752

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctpswitch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement...

5.7CVSS6.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/10/18 12:0 a.m.1 views

PT-2021-16253 · Catch Themes · Catch Infinite Scroll +12

Name of the Vulnerable Software and Affected Versions: Essential Widgets WordPress plugin versions prior to 1.9 To Top WordPress plugin versions prior to 2.3 Header Enhancement WordPress plugin versions prior to 1.5 Generate Child Theme WordPress plugin versions prior to 1.6 Essential Content Typ...

5.7CVSS5.3AI score0.00172EPSS
Exploits2References4
Rows per page
Query Builder