Lucene search
+L

9109 matches found

Tenable Product Security Advisories
Tenable Product Security Advisories
added 2023/11/16 3:53 p.m.25 views

[R1] Nessus Agent Version 10.4.4 Fixes One Vulnerability

R1 Nessus Agent Version 10.4.4 Fixes One Vulnerability Arnie Cabral Thu, 11/16/2023 - 10:53 An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host,...

7.2AI score
SaveExploits0
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2023/11/16 3:23 p.m.20 views

[R1] Nessus Version 10.6.3 Fixes One Vulnerability

R1 Nessus Version 10.6.3 Fixes One Vulnerability Arnie Cabral Thu, 11/16/2023 - 10:23 An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the...

7.4AI score
SaveExploits0
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2023/11/16 3:12 p.m.14 views

[R1] Nessus Version 10.5.7 Fixes One Vulnerability

R1 Nessus Version 10.5.7 Fixes One Vulnerability Arnie Cabral Thu, 11/16/2023 - 10:12 An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/11/16 12:00 a.m.32 views

Cisco Identity Services Engine Arbitrary File Write (cisco-sa-ise-mult-j-KxpNynR)

According to its self-reported version, Cisco Identity Services Engine is affected by an arbitrary file write vulnerability that can be exploited by a remote, authenticated attacker due to insufficient file input validation. Please see the included Cisco BIDs and Cisco Security Advisory for more...

8.8CVSS8AI score0.00888EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/11/15 10:15 p.m.8 views

CVE-2023-47444

An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server...

8.8CVSS7.9AI score0.01779EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2023/11/15 9:38 p.m.12 views

dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion...

9.8CVSS5.8AI score0.12512EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 9:30 p.m.11 views

dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion...

9.8CVSS5.8AI score0.12512EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 9:30 p.m.43 views

Moderate: Red Hat Security Advisory: dotnet8.0 security update

An update for dotnet8.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.8CVSS6.8AI score0.12512EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/15 9:29 p.m.8 views

dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion...

9.8CVSS5.8AI score0.12512EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 9:28 p.m.9 views

dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion...

9.8CVSS5.8AI score0.12512EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 9:28 p.m.63 views

Moderate: Red Hat Security Advisory: dotnet6.0 security update

An update for dotnet6.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.8CVSS6.8AI score0.12512EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/15 8:42 p.m.45 views

Moderate: Red Hat Security Advisory: dotnet8.0 security update

An update for dotnet8.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.8CVSS6.8AI score0.12512EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/15 8:42 p.m.10 views

dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion...

9.8CVSS5.8AI score0.12512EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 8:40 p.m.44 views

Moderate: Red Hat Security Advisory: dotnet6.0 security update

An update for dotnet6.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.8CVSS6.8AI score0.12512EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/15 8:40 p.m.10 views

dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion...

9.8CVSS5.8AI score0.12512EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 8:38 p.m.17 views

dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion...

9.8CVSS5.8AI score0.12512EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2023/11/15 2:11 p.m.76 views

CVE-2023-36049

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease...

9.8CVSS8.7AI score0.12512EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2023/11/15 12:00 a.m.46 views

Microsoft .NET FormatFtpCommand CRLF Injection Arbitrary File Write and Deletion Vulnerability

This vulnerability allows remote attackers to create or delete arbitrary files on FTP servers implemented using affected versions of Microsoft .NET. Interaction with the .NET framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The...

7.6CVSS7.2AI score0.12512EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/15 12:00 a.m.32 views

ALSA-2023:7257 Moderate: dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25...

9.8CVSS7.6AI score0.12512EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2023/11/15 12:00 a.m.53 views

Moderate: dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25...

9.8CVSS7AI score0.12512EPSS
SaveExploits0References6
Rows per page
Query Builder