Lucene search
+L

9989 matches found

OpenVAS
OpenVAS
added 2021/06/30 12:0 a.m.18 views

Debian: Security Advisory (DLA-2696-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.19442EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/06/30 12:0 a.m.5 views

Jenkins 代码问题漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . A code issue vulnerability exists in Jenkins Selenium HTML report Plugin 1.0 and earlier versions that stems from the...

4.3CVSS5.9AI score0.42521EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/06/30 12:0 a.m.7 views

XML2Dict 代码问题漏洞

XML2Dict is an open source python library for converting python dict and XML types. A security vulnerability exists in XML2Dict, which stems from an XXE vulnerability in version 0.2.2 of XML2Dict. An attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS7.3AI score0.01172EPSS
SaveExploits1References1
Jenkins Security Advisories
Jenkins Security Advisories
added 2021/06/30 12:0 a.m.7 views

XXE vulnerability in seleniumhtmlreport

seleniumhtmlreport 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers with the ability to control the report files parsed using this plugin to have Jenkins parse a crafted report file that uses external entities for extraction of...

7.1CVSS5.2AI score0.42521EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2021/06/29 7:15 p.m.7 views

CVE-2021-22338

There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attacker can send specific message to exploit this vulnerability, leading to the module denial of service...

5.3CVSS5.8AI score0.00631EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/29 7:15 p.m.4 views

CVE-2021-22338

There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attacker can send specific message to exploit this vulnerability, leading to the module denial of service...

5.3CVSS6AI score0.00631EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/28 4:45 p.m.13 views

GHSA-2JX8-V4HV-GX3H XXE vulnerability in Launch import

| Release Date | Affected Projects | Affected Versions | Access Vector| Security Risk | |--------------|-------------------|-------------------|---------------|---------------| | Monday, May 4, 2020| service-api | Every version, starting from 3.1.0 | Remote | Medium | Impact Starting from version...

7.5CVSS7.6AI score0.01349EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 3:31 p.m.24 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-20492)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager versions 4.2.0, 4.1.1. and 3.9. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the securit...

3AI score0.02071EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 1:29 p.m.20 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2021-20492)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

1.6AI score0.02071EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 11:3 a.m.14 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-20454)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager versions 4.2.0,4.1.1 and 3.9. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

3AI score0.02909EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 11:2 a.m.13 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-20453)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager versions 3.9,4.1.1,4.2.0. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

3AI score0.02563EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 11:1 a.m.24 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2021-20454)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

3AI score0.02909EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 11:0 a.m.15 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2021-20453)

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

3AI score0.02563EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 11:0 a.m.16 views

Security Bulletin: A security vulnerability has been identified in embedded IBM WebSphere Application Server, which is shipped with IBM Tivoli Network Manager IP Edition (CVE-2021-20453)

Summary Embedded IBM WebSphere Application Server is shipped with IBM Tivoli Network Manager versions 4.2.0, 4.1.1 and 3.9. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

2.9AI score0.02563EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/28 10:59 a.m.30 views

Security Bulletin: A security vulnerability has been identified in embedded IBM WebSphere Application Server which is shipped with IBM Tivoli Netcool Configuration Manager (CVE-2021-20453)

Summary Embedded IBM WebSphere Application Server is shipped with IBM Tivoli Netcool Configuration Manager version 6.4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

2.7AI score0.02563EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/25 10:49 p.m.28 views

Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak for Automation

Summary The vulnerabilities are related to Java, WebSphere Liberty, Node.js, open source packages and component level authorization. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated...

9.8CVSS0.7AI score0.03758EPSS
SaveExploits3Affected Software1
CNNVD
CNNVD
added 2021/06/23 12:0 a.m.8 views

Epam Systems Report Portal 代码问题漏洞

Epam Systems Report Portal is a suite of open source automated testing tools from Epam Systems, Inc. that support capturing, summarizing, and analyzing test results and reports. service-api is one of the APIs Application Programming Interfaces. A security vulnerability exists in Report Portal...

7.5CVSS7.3AI score0.02199EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/21 8:15 p.m.7 views

CVE-2021-35066

An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132...

9.8CVSS7.3AI score0.01061EPSS
SaveExploits0References2
Veracode
Veracode
added 2021/06/21 1:1 p.m.27 views

XML External Entity (XXE)

jdom2 is vulnerable to XML External Entity XXE. An attacker is able to crash the system by submitting a malicious HTTP request...

7.5CVSS0.8AI score0.19442EPSS
SaveExploits1References27Affected Software4
OSV
OSV
added 2021/06/18 10:15 a.m.7 views

CVE-2021-21669

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

9.8CVSS7.3AI score0.25746EPSS
SaveExploits0References2
Rows per page
Query Builder