Lucene search
+L

15075 matches found

The Hacker News
The Hacker News
•added 2020/12/11 11:29 a.m.•35 views

Governance Considerations for Democratizing Your Organization's Data in 2021

With the continuing rise of IoT devices, mobile networks, and digital channels, companies face a lot of pressure to generate meaningful and actionable insights from the wealth of data they capture. Gartner Research lists data democratization as one of the top strategic technology trends to watch...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/12/11 12:00 a.m.•560 views

OpenAsset Digital Asset Management SQL Injection

Title: Authenticated blind SQL injection SQLi Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.23 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28860 Author: Jack Misiura fr...

8.9AI score0.02156EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2020/12/11 12:00 a.m.•594 views

OpenAsset Digital Asset Management Insecure Direct Object Reference

Title: Missing access controls Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.22 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28861 Author: Jack Misiura from The Missing...

5.4AI score0.02294EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2020/12/11 12:00 a.m.•587 views

OpenAsset Digital Asset Management Cross Site Request Forgery

Title: Cross-site request forgery CSRF Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.26 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28858 Author: Jack Misiura from The...

8.9AI score0.01058EPSS
SaveExploits2
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•21 views

OpenAsset Digital Asset Management Input Validation Error Vulnerability

Openasset is a digital asset management software for the website building industry from Openasset UK. OpenAsset Digital Asset Management suffers from an input validation error vulnerability that allows an attacker to spoof it using the x - forward - for directive in the header. By providing a loc...

7.5CVSS7.1AI score0.0247EPSS
SaveExploits1References6
Packet Storm
Packet Storm
•added 2020/12/11 12:00 a.m.•527 views

OpenAsset Digital Asset Management Cross Site Scripting

Title: Stored cross-site scripting XSS Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.23 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28857 Author: Jack Misiura from The...

6.3AI score0.01508EPSS
SaveExploits2
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•21 views

Openasset Cross-Site Scripting Vulnerability

Openasset is a digital asset management software for the website builder industry from Openasset UK. A cross-site scripting vulnerability exists in OpenAsset Digital Asset Management that stems from the web application providing several endpoints that allow unauthenticated data retrieval. For...

5.3CVSS5.9AI score0.02294EPSS
SaveExploits2References6
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•26 views

OpenAsset Digital Asset Management software Cross-Site Scripting Vulnerability

Openasset is a digital asset management software for the website building industry from Openasset UK. A cross-site scripting vulnerability exists in the OpenAsset Digital Asset Management software that originates from allowing remote attackers to inject arbitrary JavaScript or HTML via...

6.1CVSS6.4AI score0.00781EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•26 views

OpenAsset Digital Asset Management SQL注入漏洞

Openasset is a digital asset management software for the website building industry from Openasset UK. OpenAsset Digital Asset Management suffers from a SQL injection vulnerability that originates from a blind remote SQL injection via authentication, which can be exploited by an attacker to gain...

8.8CVSS7.4AI score0.02156EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/11 12:00 a.m.•8 views

CVE-2020-29654: Uncontrolled Search Path Element

Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account...

7.8CVSS5.8AI score0.00435EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•28 views

Openasset Cross-Site Request Forgery Vulnerability

Openasset is a digital asset management software for the website building industry from Openasset UK. The OpenAsset Digital Asset Management application suffers from a cross-site request forgery vulnerability, which it does not verify that requests made to itself are intentionally made by the use...

8.8CVSS7.2AI score0.01058EPSS
SaveExploits2References6
Packet Storm
Packet Storm
•added 2020/12/11 12:00 a.m.•581 views

OpenAsset Digital Asset Management IP Access Control Bypass

Title: IP access control bypass Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.20 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28856 Author: Jack Misiura from The Missing...

0.8AI score0.0247EPSS
SaveExploits1
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•20 views

Western Digital Dashboard Code Issue Vulnerability

Western Digital Dashboard is a hard disk management software from Western Digital USA. The software can be used to analyze ssd including model, capacity, firmware version and smart attributes and firmware updates, and can help users take full advantage of WD SSF's software utility A security...

7.8CVSS7.1AI score0.00435EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•25 views

OpenAsset Digital Asset Management software 跨站脚本漏洞

Openasset is a digital asset management software for the website building industry from Openasset UK. The OpenAsset Digital Asset Management software product suffers from an XSS injection vulnerability that could allow a remote attacker to inject arbitrary JavaScript or HTML for later rendering b...

6.1CVSS6.5AI score0.01508EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/11 12:00 a.m.•6 views

CVE-2020-29563: Improper Authentication

An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device...

9.8CVSS5.9AI score0.02922EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/11 12:00 a.m.•28 views

Western Digital My Cloud 授权问题漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital, Inc. An authorization issue vulnerability exists in versions prior to Western Digital My Cloud OS 5.07.118, which could be exploited by attackers to gain access to the device...

9.8CVSS7.3AI score0.02922EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/12/11 12:00 a.m.•24 views

PT-2020-17191 · Western Digital · Western Digital My Cloud Os 5

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud OS 5 versions prior to 5.07.118 Description: An issue was discovered that could allow an unauthenticated user to gain access to the device due to a NAS Admin authentication bypass. This could potentially lead to...

9.8CVSS9.7AI score0.02922EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/12/11 12:00 a.m.•6 views

PT-2020-17234

Name of the Vulnerable Software and Affected Versions Western Digital Dashboard versions prior to 3.2.2.9 Description The issue allows DLL Hijacking, which can lead to the compromise of the SYSTEM account. Recommendations For versions prior to 3.2.2.9, update to version 3.2.2.9 or later to resolv...

7.8CVSS0.00435EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2020/12/10 11:30 a.m.•80 views

DarkSide - Tool Information Gathering And Social Engineering

Features: Hacker Dashboard Hacker News thehackernews.com/ New Exploits Exploit-db.com Hacking Tutorials Video youtube.com The Latest Prices OF Digital Currencies Rials , Usd Information Gathering Bypass Cloud Flare Cms Detect Trace Toute Reverse IP Port Scan IP location Finder Show HTTP Header Fi...

7.4AI score
SaveExploits0References1
NVD
NVD
•added 2020/12/10 12:15 a.m.•25 views

CVE-2020-17097

Windows Digital Media Receiver Elevation of Privilege Vulnerability...

7.8CVSS5.7AI score0.01053EPSS
SaveExploits0References2
Rows per page
Query Builder