Lucene search
K

196 matches found

Nuclei
Nuclei
added 3 days ago6 views

WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6671 info: name: WhatsUp Gold GetStatisticalMonitorList SQL Injectio...

9.8CVSS7.6AI score0.76181EPSS
Exploits0References3
Nuclei
Nuclei
added 2026/05/25 4:37 a.m.39 views

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

9.8CVSS7.6AI score0.94468EPSS
Exploits2References3
EUVD
EUVD
added 2026/03/11 9:31 p.m.5 views

EUVD-2019-19738

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References5
OSV
OSV
added 2026/02/12 11:16 p.m.1 views

CVE-2019-25340

SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted in...

7.5CVSS5.8AI score0.00037EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/02/12 10:48 p.m.2 views

CVE-2019-25340 SpotAuditor 5.3.2 - 'Base64' Denial Of Service

SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted in...

7.5CVSS5.6AI score0.00037EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/02/12 12:0 a.m.3 views

PT-2026-7935

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler SEH...

8.4CVSS6.4AI score0.00029EPSS
Exploits1References5
Arista
Arista
added 2026/02/03 12:0 a.m.26 views

Security Advisory 0133

Security Advisory 0133 PDF Date: February 3, 2026 Revision | Date | Changes ---|---|--- 1.0 | February 3, 2026 | Initial release Description Several vulnerabilities exist for the Arista Edge Threat Management - Arista NG Firewall NGFW. On affected platforms, an administrative account logged into...

7.2CVSS5.6AI score0.00169EPSS
Exploits0
Cvelist
Cvelist
added 2025/12/10 4:50 p.m.25 views

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

0.00215EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from a lack of...

4.3CVSS6.6AI score0.00215EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/11/20 9:36 p.m.1 views

CVE-2025-13315

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...

9.8CVSS7.1AI score0.83986EPSS
Exploits3References1
OSV
OSV
added 2025/11/19 6:15 p.m.2 views

CVE-2025-13315

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...

9.8CVSS5.8AI score0.83986EPSS
Exploits3References1
Vulnrichment
Vulnrichment
added 2025/11/19 5:41 p.m.2 views

CVE-2025-13315 Unauthenticated log access in Twonky Server

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...

9.3CVSS6.7AI score0.83986EPSS
Exploits3References1
Cvelist
Cvelist
added 2025/11/19 5:41 p.m.396 views

CVE-2025-13315 Unauthenticated log access in Twonky Server

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...

9.3CVSS0.83986EPSS
Exploits3References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2001-1132

Malware in sbrugna...

5CVSS6.4AI score0.01095EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-6852

Malware in sbrugna...

4.7CVSS4.9AI score0.00062EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-1482

Malware in sbrugna...

6.8CVSS6.3AI score0.0055EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-4780

Malware in sbrugna...

9.8CVSS9.5AI score0.00478EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-4788

Malware in sbrugna...

5CVSS6.4AI score0.00336EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-0591

Malware in sbrugna...

7.2CVSS6.4AI score0.00143EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2003-0487

Malware in sbrugna...

10CVSS6.4AI score0.00461EPSS
Exploits2References3
Rows per page
Query Builder