Lucene search
+L

2 matches found

OSV
OSV
added 2025/08/05 5:13 p.m.7 views

GHSA-57Q2-6CP4-9MQ3 XWiki exposes passwords and emails stored in fields not named password/email in xml.vm

Impact The XML export of a page in XWiki that can be triggered by any user with view rights on a page by appending ?xpage=xml to the URL includes password and email properties stored on a document that aren't named password or email. This allows any user to obtain the salted and hashed user accou...

8.7CVSS6.3AI score0.01285EPSS
SaveExploits0References5
exploitpack
exploitpack
added 2002/02/08 12:0 a.m.22 views

HP AdvanceStack Switch - Authentication Bypass

HP AdvanceStack Switch - Authentication Bypass source: https://www.securityfocus.com/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching. It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypass...

0.8AI score
SaveExploits0
Rows per page
Query Builder