2 matches found
FreshRSS 信息泄露漏洞
FreshRSS is a free, self-hosted RSS aggregator from the FreshRSS open source. An information disclosure vulnerability exists in versions of FreshRSS prior to 1.20.2 that stems from a remote user being able to access user configuration files, such configurations contain hashed passwords for the we...
7.5CVSS7.3AI score0.00838EPSS
SaveExploits0References4
CVE-1999-0884
The CVE concerns the Zeus web server’s administrative interface, which uses weak password encryption. The available connected records reiterate this weakness but do not provide product version details, exploit guidance, or specific remediation steps. Practical impact is limited to password confid...
5CVSS7.1AI score0.0079EPSS
SaveExploits0References3Affected Software1
20