Lucene search
+L

20403 matches found

GithubExploit
GithubExploit
•added 2021/12/13 3:22 p.m.•30 views

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

...

10CVSS6.9AI score0.99999EPSS
SaveExploits385
osv_oesa
osv_oesa
•added 2021/12/10 11:04 a.m.•10 views

OESA-2021-1456 mailman security update

The GNU mailing list manager. Security Fixes: In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes.CVE-2021-44227...

8.8CVSS7.1AI score0.00757EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/12/08 12:00 a.m.•35 views

Ubuntu 18.04 LTS : Mailman vulnerability (USN-5180-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5180-1 advisory. It was discovered that Mailman incorrectly handled CSRF tokens. A remote list member or moderator could possibly use their own token to craft an admin request CSR...

8.8CVSS7.9AI score0.00757EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•37 views

Fedora: Security Advisory for kernel (FEDORA-2021-19ad835cb3)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.6AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•19 views

Fedora: Security Advisory for weston (FEDORA-2021-ac23d9e47f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.9AI score0.01662EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•50 views

Fedora: Security Advisory for vim (FEDORA-2021-5cd9df120e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.5CVSS7.9AI score0.02231EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•25 views

Fedora: Security Advisory for hydra (FEDORA-2021-ac23d9e47f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.9AI score0.01662EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•20 views

Fedora: Security Advisory for vinagre (FEDORA-2021-ac23d9e47f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.9AI score0.01662EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•42 views

Fedora: Security Advisory for librecad (FEDORA-2021-fa9e3c23f2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.8AI score0.02762EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2021/12/03 12:00 a.m.•55 views

HP Printer Buffer Overflow Vulnerability (HPSBPI03749, Printing-Shellz)

Multiple HP printers are prone to a buffer overflow vulnerability dubbed Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

9.8CVSS7.3AI score0.11243EPSS
SaveExploits0References2
NCSC
NCSC
•added 2021/12/03 12:00 a.m.•10 views

Vulnerability fixed in GNU Mailman

The developers of GNU Mailman have fixed a vulnerability in GNU Mailman. The vulnerability could be exploited by a malicious person abused to perform a Cross-Site Request Forgery XSRF on the administrator page. The developers have released updates to fix the vulnerability fix in GNU Mailman 2.1.3...

8.8CVSS6.6AI score0.00757EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/12/03 12:00 a.m.•44 views

SUSE SLED12 / SLES12 Security Update : gmp (SUSE-SU-2021:3878-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3878-1 advisory. - CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inpraw.c bsc1192717. Tenable has extracted the preceding descripti...

7.5CVSS7.4AI score0.04464EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2021/12/03 12:00 a.m.•42 views

Oracle Linux 7 : mailman (ELSA-2021-4913)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4913 advisory. - Fix for CVE-2021-44227 - Fix for CVE-2016-6893 - Fix for CVE-2021-42097 Tenable has extracted the preceding description block directly from the Oracl...

8.8CVSS7.3AI score0.01613EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/12/02 3:15 a.m.•8 views

CVE-2021-44227

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.8CVSS7.3AI score0.00757EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/02 3:15 a.m.•13 views

CVE-2021-44227

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.8CVSS6.8AI score0.00757EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2021/12/02 3:15 a.m.•16 views

UBUNTU-CVE-2021-44227

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.8CVSS7.3AI score0.00757EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/12/02 2:52 a.m.•33 views

CVE-2021-44227

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.9AI score0.00757EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/02 2:52 a.m.•5 views

CVE-2021-44227

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.8CVSS0.00757EPSS
SaveExploits0References7
CVE
CVE
•added 2021/12/02 2:52 a.m.•308 views

CVE-2021-44227

GNU Mailman 2.1.x prior to 2.1.38 is affected by CVE-2021-44227, allowing a list member or moderator to obtain a CSRF token and craft an admin request that can change settings or reset the admin password, potentially leading to admin takeover. Multiple advisories confirm the issue across distribu...

8.8CVSS8.5AI score0.00757EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2021/12/02 12:00 a.m.•54 views

openSUSE: Security Advisory for poppler (openSUSE-SU-2021:3854-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS6.6AI score0.03518EPSS
SaveExploits17References2
Rows per page
Query Builder