Lucene search
+L

103 matches found

CNNVD
CNNVD
added 2021/06/10 12:0 a.m.8 views

McAfee Agent安全漏洞

Mcafee McAfee Agent MA is a McAfee client component that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. A security vulnerability exists in McAfee Agent versions prior to 5.7.3. The vulnerability stems from improper privilege manageme...

4.8CVSS4.9AI score0.00182EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/05/06 12:0 a.m.36 views

IBM QRadar SIEM Path Traversal Vulnerability

QRadar SIEM is an IBM enterprise security information and event management product that consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. A path traversal vulnerability exists in the way IBM QRadar SIEM versions 7.3 an...

4.9CVSS6.4AI score0.01258EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2021/01/03 12:0 a.m.115 views

Hyland Enterprise Search 11.2.2 Cross Site Scripting

The admin console's event viewer displays logged event data inside of tags. An attack string like "alert'hi'" in any place across Enterprise Search that will cause an error, like instead of a number or for the username on the login page or through the new Federated Authentication, will then be...

7.4AI score
SaveExploits0
OSV
OSV
added 2020/09/11 6:15 p.m.3 views

ALPINE-CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.3AI score0.00407EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 6:15 p.m.3 views

DEBIAN-CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.9AI score0.00407EPSS
SaveExploits0References1
PyPA
PyPA
added 2020/09/11 6:15 p.m.6 views

PYSEC-2020-4

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.3AI score0.00407EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/09/11 6:15 p.m.4 views

UBUNTU-CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS7.1AI score0.00407EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/09/01 7:32 p.m.8 views

Ansible: module_args does not censor properly in --check mode

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS7.1AI score0.00407EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/08/01 12:0 a.m.8 views

PT-2020-6577

Name of the Vulnerable Software and Affected Versions Ansible Engine affected versions not specified Description A flaw was found in the Ansible Engine when using module args. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This fla...

6.8CVSS7.1AI score0.00568EPSS
SaveExploits1References186
RedHat Linux
RedHat Linux
added 2020/06/15 4:8 p.m.5 views

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

An XML deserialization vulnerability was discovered in slf4j's EventData, which accepts an XML serialized string and can lead to arbitrary code execution...

9.8CVSS7.2AI score0.15087EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2019/10/17 2:54 p.m.3 views

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

An XML deserialization vulnerability was discovered in slf4j's EventData, which accepts an XML serialized string and can lead to arbitrary code execution...

9.8CVSS7.2AI score0.15087EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2019/08/08 10:8 a.m.3 views

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

An XML deserialization vulnerability was discovered in slf4j's EventData, which accepts an XML serialized string and can lead to arbitrary code execution...

9.8CVSS7.2AI score0.15087EPSS
SaveExploits0References4
Carbon Black Blog
Carbon Black Blog
added 2019/03/05 6:7 p.m.99 views

Partner Perspectives: Endpoint Security Analytics with Sumo Logic and Carbon Black

As the threat landscape continues to expand, having end-to-end visibility across your modern application stack and cloud infrastructures is crucial. Customers cannot afford to have blind spots in their environment; and that includes data being ingested from third-party tools. With the industry...

0.2AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2018/10/31 5:27 p.m.107 views

Tomorrowland festival goers affected by data breach

Tomorrowland, a major international music festival, has revealed a data breach potentially affecting around 60,000 attendees. This one is a little different though, as the data accessed without permission isn't recent. In fact, it dates back four years to an event long since come and gone...

0.1AI score
SaveExploits0
Carbon Black Blog
Carbon Black Blog
added 2018/10/23 1:0 p.m.111 views

Partner Perspectives: The Power of Shared Intelligence: Juniper Sky ATP and Cb Response

Scott Emo is the Director of Field Readiness, Security, for Juniper Networks. Uncover and Mitigate the Most Sophisticated Cyber Attacks The rapid growth of emerging technologies, combined with an increasing number of connected devices running business-critical applications in highly distributed...

0.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2018/09/11 7:53 a.m.4 views

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

An XML deserialization vulnerability was discovered in slf4j's EventData, which accepts an XML serialized string and can lead to arbitrary code execution...

9.8CVSS7.2AI score0.15087EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/07/05 3:28 p.m.3 views

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

An XML deserialization vulnerability was discovered in slf4j's EventData, which accepts an XML serialized string and can lead to arbitrary code execution...

9.8CVSS7.2AI score0.15087EPSS
SaveExploits0References4
Circl
Circl
added 2018/05/29 3:50 p.m.6 views

CVE-1999-0508

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/snmp/snmpenum.rb 2018-05-29 15:50:33+00:00| seen|...

4.6CVSS8.5AI score0.0356EPSS
SaveExploits3References3
RedHat Linux
RedHat Linux
added 2018/05/16 3:44 p.m.9 views

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

An XML deserialization vulnerability was discovered in slf4j's EventData, which accepts an XML serialized string and can lead to arbitrary code execution...

9.8CVSS7.2AI score0.15087EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/05/14 8:51 p.m.4 views

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

An XML deserialization vulnerability was discovered in slf4j's EventData, which accepts an XML serialized string and can lead to arbitrary code execution...

9.8CVSS7.2AI score0.15087EPSS
SaveExploits0References4
Rows per page
Query Builder