Lucene search
+L

95 matches found

Cvelist
Cvelist
added 2024/03/22 1:35 p.m.29 views

CVE-2024-2725 Exposure of Sensitive Information vulnerability in the CIGESv2 system

Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application...

7.5CVSS7.6AI score0.00624EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/22 1:35 p.m.69 views

CVE-2024-2725

CVE-2024-2725 affects the CIGESv2 system and describes an information-exposure vulnerability where a remote attacker can access the /vendor/composer/installed.json endpoint to enumerate all installed packages used by the application. Documented impact is information disclosure with CVSS v3.1 base...

7.5CVSS7.4AI score0.00624EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/03/22 12:00 a.m.10 views

CIGESv2 信息泄露漏洞

CIGESv2 is a queue and reservation management system from CIGESv2, Inc. CIGESv2 suffers from an information disclosure vulnerability that stems from the presence of an information disclosure vulnerability. Allows an attacker to access /vender/composer/installed.json and retrieve all installed...

7.5CVSS6.2AI score0.00624EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/22 12:00 a.m.15 views

PT-2024-21774 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 affected versions not specified Description: The issue concerns an information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access the "/vendor/composer/installed.json" endpoint and retrieve all...

7.5CVSS6.6AI score0.00624EPSS
SaveExploits0References4
NVD
NVD
added 2023/10/30 5:15 p.m.26 views

CVE-2023-21334

In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.2AI score0.00105EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/30 5:15 p.m.8 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00093EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/30 4:56 p.m.18 views

CVE-2023-21334

In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00105EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/30 4:56 p.m.34 views

CVE-2023-21334

In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00105EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/30 4:56 p.m.67 views

CVE-2023-21334

CVE-2023-21334 affects Android's App Ops Service. A logic error allows an attacker with local access to disclose information about installed packages without requiring extra execution privileges or user interaction. The vulnerability is documented across multiple sources (NVD/Red Hat/CNNVD) with ...

5.5CVSS5.8AI score0.00105EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/30 4:18 p.m.30 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00093EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/30 4:18 p.m.18 views

CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00093EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/08/01 12:00 a.m.8 views

Package Manager Packages Report (Windows)

Reports details about packages installed via package managers %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid179138; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/07/29"; scriptnameenglish:"Package Manager Packages Report...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/08/01 12:00 a.m.10 views

Package Manager Packages Report (nix)

Reports details about packages installed via package managers TRUSTED...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/11/03 12:00 a.m.41 views

Ubuntu 16.04 ESM : SQLite vulnerability (USN-5712-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5712-1 advisory. It was discovered that SQLite did not properly handle large string inputs in certain circumstances. An attacker could possibly use this issue to cause a denial of...

7.5CVSS7.9AI score0.21454EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2022/08/15 12:00 a.m.31 views

Python Installed Packages (deprecated)

This plugin is replaced by Python Installed Packages Plugin ID 181215. Binary data pythonpackagesinstalledwin.nbin...

7.1AI score
SaveExploits0
OSV
OSV
added 2022/08/12 3:15 p.m.6 views

CVE-2022-20322

In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

5.5CVSS5.9AI score0.00097EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/12 3:15 p.m.6 views

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

3.3CVSS5.9AI score0.00094EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.7 views

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

3.3CVSS5.9AI score0.00094EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/12 3:15 p.m.26 views

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

3.3CVSS0.00094EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.7 views

CVE-2022-20322

In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

5.5CVSS6.1AI score0.00097EPSS
SaveExploits0References2
Rows per page
Query Builder