CVE-2023-48700

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

PYSEC-2023-288

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

Code injection

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

CVE-2023-48700 Clear Text Credentials Exposed via Onboarding Task

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

CVE-2023-48700 Clear Text Credentials Exposed via Onboarding Task

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new device into Nautobot down to, in many cases, an IP Address and a Location. Starting in version 2.0.0 and prior to version 3.0.0, credentials provided to onboarding task are...

avo possible unsafe reflection / partial DoS vulnerability

Summary The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record. Details After reviewing th...

dovecot: Privilege escalation when similar master and non-master passdbs are used

A vulnerability was found in the Dovecot IMAP Server. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrect settings can lead...

CVE-2019-1003002

creationtimestamp| type| source ---|---|--- 2019-02-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46427 2019-03-18 12:37:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkinsmetaprogramming.rb 2019-03-19 00:00:00+00:00|...

KLA11364 OSI vulnerability in KeePass

Unspecified vulnerability was found in KeePass. Malicious users can exploit this vulnerability remotely via inadvertently decrypting certain database entries into memory to obtain sensetive information. Original advisories - Related products KeePass-Password-Safe CVE list CVE-2017-1000066 warning...

CVE-2017-1000066

The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information...

MGASA-2015-0483 Updated keepassx packages fix CVE-2015-8378

Updated keepassx package fixes security vulnerability: Cancelling an export operation creates clear text copy of all of the user's KeePassX password database entries. CVE-2015-8378...

CVE-2014-9252

Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain sensitive information by reading database entries, aka ZEN-15416...

Cross site scripting

Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain sensitive information by reading database entries, aka ZEN-15416...

PHP TopSites 2.0/2.2 HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6621/info An HTML injection vulnerability has been discovered in PHP TopSites. The issue occurs due to insufficient sanitization of user-supplied data. By injecting HTML code into the body tag of the description page, whe...

CVE-2014-4158

creationtimestamp| type| source ---|---|--- 2014-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33027 2014-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34059...

CVE-2013-4694

creationtimestamp| type| source ---|---|--- 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26558 2013-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27874...

CVE-2011-5258

creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36380 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36379...

CVE-2010-3850

creationtimestamp| type| source ---|---|--- 2010-12-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15704 2011-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17787...

CVE-2010-2439

creationtimestamp| type| source ---|---|--- 2010-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13934 2010-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13942 2010-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14397...

CVE-2009-4019

creationtimestamp| type| source ---|---|--- 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33398 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33397...