Lucene search
+L

1540 matches found

OSV
OSV
added 2021/07/12 11:15 p.m.4 views

DEBIAN-CVE-2021-32746

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the doc module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explicit access permissio...

5.3CVSS5.8AI score0.01306EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/12 11:15 p.m.15 views

Design/Logic Flaw

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the doc module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explicit access permissio...

3.5CVSS5.3AI score0.01306EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/07/12 11:15 p.m.32 views

CVE-2021-32746

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the doc module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explicit access permissio...

5.3CVSS6.1AI score0.01306EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2021/07/12 11:15 p.m.4 views

CVE-2021-32746

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the doc module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explicit access permissio...

5.3CVSS6.2AI score0.01306EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/07/12 11:15 p.m.7 views

UBUNTU-CVE-2021-32746

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the doc module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explicit access permissio...

5.3CVSS5.9AI score0.01306EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2021/07/12 10:25 p.m.26 views

CVE-2021-32746 Possible path traversal by use of the `doc` module

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the doc module of Icinga Web 2 allows to view documentation directly in the UI. It must be enabled manually by an administrator and users need explicit access permissio...

5.3CVSS5.7AI score0.01306EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/07/12 12:0 a.m.6 views

Icinga Web 2 路径遍历漏洞

Icinga Web 2 is an application that supports Icinga 2, Icinga Core, and any other IDO database-compatible monitoring backend, developed by the Icinga Project as a next-generation open source monitoring web interface, framework, and command line interface. Icinga Web 2 suffers from a path traversa...

5.3CVSS5.9AI score0.01306EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2021/06/10 12:0 a.m.26 views

SUSE SLES11 Security Update : bzip2 (SUSE-SU-2019:14139-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2019:14139-1 advisory. - BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. CVE-2019-12900 Note that Nessus has n...

9.8CVSS6.9AI score0.08054EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2017:2611-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.0041EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2021/05/28 12:0 a.m.45 views

CentOS 8 : redis:6 (CESA-2021:2034)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2034 advisory. - redis: Integer overflow via STRALGO LCS command CVE-2021-29477 Note that Nessus has not tested for this issue but has instead relied only on the application's...

8.8CVSS7.6AI score0.04028EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/10 7:17 p.m.25 views

GHSA-GM8G-XHH8-RMWR Prototype Pollution in doc-path

This affects the package doc-path before 2.1.2...

9.8CVSS9.5AI score0.02741EPSS
SaveExploits1References4
vulnersOsv
vulnersOsv
added 2021/05/10 7:17 p.m.6 views

@adeunis/codecs (>=1.3.0 <=1.4.0), @digifi-los/reactapp (>=0.0.1 <=0.1.2) +45 more potentially affected by CVE-2020-7772 via doc-path (>=1.0.7 <=2.1.0)

doc-path NPM version =1.0.7, =1.3.0, =0.0.1, =1.0.5, =0.0.2, =0.0.3-alpha.5, =0.0.3-alpha.5, =0.0.2, =0.0.3-alpha.9, =0.0.3-alpha.5, =0.0.3-alpha.13, =0.0.3-alpha.5, =0.0.3-alpha.10, =0.0.3-alpha.14, =0.0.3-alpha.18 - adeunis-codecs-lib3 =1.3.0 - adeunis-codecs-lib4 =1.3.0 and more Source cves:...

10CVSS7.2AI score0.02741EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/05/07 12:0 a.m.4 views

PT-2022-21979 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: HTMLDoc versions 1.9.12 and below Description: A heap overflow issue was discovered in HTMLDoc via the e node in htmldoc/htmldoc/html.cxx:588. This issue can potentially be exploited. Recommendations: For HTMLDoc versions 1.9.12 and below, at...

10CVSS6.8AI score0.07349EPSS
SaveExploits19References76
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2018:1202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.84172EPSS
SaveExploits12References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2014:1511-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS7.7AI score0.05307EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2018:2081-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS7.4AI score0.02554EPSS
SaveExploits0References11
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2019:2771-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.01518EPSS
SaveExploits0References4
Fedora
Fedora
added 2021/03/20 12:21 a.m.25 views

[SECURITY] Fedora 34 Update: gnome-desktop3-40~rc-1.fc34

gnome-desktop contains the libgnome-desktop library as well as a data file that exports the "GNOME" version to the Settings Details panel. The libgnome-desktop library provides API shared by several applications on the desktop, but that cannot live in the platform for various reasons. There is no...

5.5CVSS2.7AI score0.00639EPSS
SaveExploits1
OPENSUSE Linux
OPENSUSE Linux
added 2021/03/14 12:0 a.m.27 views

Security update for crmsh (important)

openSUSE Security Update: Security update for crmsh Announcement ID: openSUSE-SU-2021:0410-1 Rating: important References: 1154927 1178454 1178869 1179999 1180126 1180137 1180571 1180688 1181415 Cross-References: CVE-2020-35459 CVE-2021-3020 CVSS scores: CVE-2020-35459 NVD : 7.8...

8.4CVSS7.7AI score0.01014EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2021/01/26 12:0 a.m.7 views

PT-2021-8107 · Htmldoc +3 · Htmldoc +3

Name of the Vulnerable Software and Affected Versions: HTMLDOC version 1.9.12 Description: The issue is related to a heap buffer overflow in the render table row function, located in the ps-pdf.cxx component of the HTMLDOC tool. This overflow can lead to arbitrary code execution and denial of...

10CVSS7.6AI score0.07349EPSS
SaveExploits16References75
Rows per page
Query Builder