Lucene search
+L

3 matches found

OpenVAS
OpenVAS
•added 2019/06/22 12:00 a.m.•150 views

Ubuntu: Security Advisory (USN-4030-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.04937EPSS
SaveExploits4References2
NVD
NVD
•added 2018/02/06 6:29 p.m.•24 views

CVE-2016-3952

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/templateexamples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access...

7.8CVSS7.8AI score0.01058EPSS
SaveExploits1References3
CVE
CVE
•added 2018/02/06 6:00 p.m.•78 views

CVE-2016-3952

web2py (standalone) before 2.14.1 is affected by CVE-2016-3952: an attacker can request examples/template_examples/beautify to obtain environment variable values, which can be leveraged to gain administrative access. The issue aligns with documented exposure of sensitive information in web2py-rel...

7.8CVSS8.6AI score0.01058EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder