6929 matches found
Cross site scripting
Cross Site Scripting XSS vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter...
Design/Logic Flaw
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information...
PT-2021-10097 · Apache · Apache Flink
Name of the Vulnerable Software and Affected Versions: Apache Flink versions 1.11.0 through 1.11.2 Description: A change introduced in Apache Flink allows attackers to read any file on the local filesystem of the JobManager through the REST interface. Access is restricted to files accessible by t...
CVE-2020-36112
creationtimestamp| type| source ---|---|--- 2021-01-04 19:10:47+00:00| seen| https://t.me/cibsecurity/21547 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...
CVE-2020-6862
creationtimestamp| type| source ---|---|--- 2020-12-29 19:51:33+00:00| exploited| https://t.me/CyberSecurityTechnologies/1729...
SolarWinds Orion Platform < 2019.4 HF6 / 2020.2 < 2020.2.1 HF2 Authentication Bypass (SUPERNOVA)
The version of SolarWinds Orion Platform running on the remote host is prior to 2019.4 HF6 or 2020.2 prior to 2020.2.1 HF 2. It is, therefore, affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this, via a specially crafted web request, to bypass...
Web Servers Buffer Overflow Attempt (CVE-2020-3119; CVE-2020-3120; CVE-2020-3172; CVE-2020-8450)
A buffer overflow vulnerability can be exploited by sending a parameter with size larger than can be stored in a buffer. Successful exploitation could result in execution of arbitrary code on the target system or denial of service conditions...
CVE-2020-2503
If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later...
CVE-2020-2505
If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later...
Cross site scripting
If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later...
CVE-2020-24581
creationtimestamp| type| source ---|---|--- 2020-12-22 22:53:21+00:00| seen| https://t.me/cibsecurity/21187 2021-02-04 17:32:29+00:00| published-proof-of-concept| https://t.me/reconshell/404 2021-02-05 19:52:01+00:00| published-proof-of-concept|...
CVE-2020-35606
creationtimestamp| type| source ---|---|--- 2020-12-21 22:52:17+00:00| seen| https://t.me/cibsecurity/21140 2020-12-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49318 2020-12-31 18:30:13+00:00| seen| https://t.me/CyberSecurityTechnologies/2350 2024-11-14 06:07:39+00:00| seen|...
CVE-2020-11738
creationtimestamp| type| source ---|---|--- 2020-12-18 22:18:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wpduplicatorfileread.rb 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen...
CVE-2020-29607
creationtimestamp| type| source ---|---|--- 2020-12-16 18:41:39+00:00| seen| https://t.me/cibsecurity/20923 2021-05-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49909 2021-05-26 12:17:00+00:00| seen| https://t.me/pwnwikizhchannel/510 2021-06-18 20:00:35+00:00|...
CVE-2020-10770
creationtimestamp| type| source ---|---|--- 2020-12-15 22:40:56+00:00| seen| https://t.me/cibsecurity/20877 2023-09-29 12:42:29+00:00| seen| https://t.me/cibsecurity/71269 2025-02-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-05 2025-03-09 00:00:00+00:00| see...
CVE-2020-35113
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 84, Thunderbi...
Information disclosure
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information...
ManageEngine ServiceDesk Plus < 10.0 Build 10012 Arbitrary File Upload
An arbitrary file upload vulnerability exists in ManageEngine ServiceDesk Plus. A low privilege authenticated, remote attacker can exploit this by uploading arbitrary files to the remote host with the potential to execute arbitrary code on the server. Note that Nessus has not tested for these...
CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS...
