Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2003-1307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The modphp module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the...

4.3CVSS5.6AI score0.01603EPSS
Exploits1References2
NVD
NVD
added 2023/05/16 5:15 p.m.12 views

CVE-2023-32993

Jenkins SAML Single Sign OnSSO Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections...

4.8CVSS5AI score0.00209EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/16 4:0 p.m.21 views

CVE-2023-32993

Jenkins SAML Single Sign OnSSO Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections...

5.3AI score0.00209EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/05/24 5:10 p.m.25 views

Missing SSH host key validation in Mac Plugin

Mac Plugin 1.1.0 and earlier does not use SSH host key validation when connecting to Mac Cloud host launched by the plugin. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections to build agents. Mac Plugin 1.2.0 validates SSH host keys when...

7.4CVSS7AI score0.0057EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2006/10/23 5:0 p.m.87 views

CVE-2003-1307

Summary: CVE-2003-1307 affects the mod_php module of the Apache HTTP Server. Vulnerability: Local users with write access to PHP scripts can signal the server’s process group and manipulate server file descriptors, demonstrated by sending a STOP signal and intercepting connections on the server’s...

4.3CVSS6.4AI score0.01603EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2003/12/31 5:0 a.m.2 views

DEBIAN-CVE-2003-1307

The modphp module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: th...

4.3CVSS6.7AI score0.01603EPSS
Exploits1References1
Rows per page
Query Builder