Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

54 matches found

Prion
Prion•added 2021/12/15 8:15 p.m.•30 views

Authorization

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote attacker to access at least the URL "/fpui/jsp/index.jsp" leading to unknown impact, presumably some violation of...

5CVSS5.3AI score0.02776EPSS
SaveExploits2References3Affected Software3
Prion
Prion•added 2021/12/15 8:15 p.m.•37 views

Authorization

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticated, remote attacker with read-only privileges to create an account with administrative privileges. Older versions of...

6.5CVSS8.6AI score0.01668EPSS
SaveExploits0References3Affected Software3
Prion
Prion•added 2021/12/15 8:15 p.m.•36 views

Design/Logic Flaw

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this...

6.5CVSS8.6AI score0.01657EPSS
SaveExploits1References3Affected Software3
CVE
CVE•added 2021/12/15 4:14 p.m.•77 views

CVE-2021-27859

CVE-2021-27859 (FatPipe WARP/IPVPN/MPVPN) is a missing authorization vulnerability in the web management interface that allows an authenticated, read-only user to create an administrative account. Affected versions are FatPipe software prior to 10.1.2r60p91 and 10.2.2 prior to r42; older FatPipe ...

8.8CVSS8.8AI score0.01668EPSS
SaveExploits0References3Affected Software1
CVE
CVE•added 2021/12/15 4:14 p.m.•77 views

CVE-2021-27857

CVE-2021-27857 describes a missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN. Before versions 10.1.2r60p91 and 10.2.2r42, remote unauthenticated attackers can download a configuration archive, with the hostname used as part of the file name. Old...

7.5CVSS7.5AI score0.01853EPSS
SaveExploits1References3Affected Software1
CVE
CVE•added 2021/12/15 4:14 p.m.•76 views

CVE-2021-27856

FatPipe WARP , IPVPN , and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 are vulnerable to a backdoor account. The software includes an account named "cmuser" that possesses administrative privileges and has no password , allowing unauthenticated attackers to gain unauthorized admin...

9.8CVSS9.6AI score0.05469EPSS
SaveIn wildExploits2References3Affected Software1
CVE
CVE•added 2021/12/15 4:14 p.m.•85 views

CVE-2021-27855

CVE-2021-27855 affects FatPipe WARP/IPVPN/MPVPN software prior to 10.1.2r60p91 and 10.2.2r42. The vulnerability allows a remote, authenticated user with read-only privileges to elevate to administrative privileges via a privileged action (HTTP/JSON parameter manipulation). Affected versions inclu...

8.8CVSS8.7AI score0.01657EPSS
SaveIn wildExploits1References3Affected Software1
Positive Technologies
Positive Technologies•added 2021/12/15 12:00 a.m.•6 views

PT-2021-17640

Name of the Vulnerable Software and Affected Versions: FatPipe WARP, IPVPN, and MPVPN software versions prior to 10.1.2r60p91 and 10.2.2r42 Description: The issue concerns an account named cmuser that has administrative privileges and no password. This account is present in the affected software...

9.8CVSS0.05469EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies•added 2021/12/15 12:00 a.m.•7 views

PT-2021-17642

Name of the Vulnerable Software and Affected Versions: FatPipe WARP, IPVPN, and MPVPN software versions prior to 10.1.2r60p91 and 10.2.2r42 Description: A missing authorization issue in the web management interface allows a remote attacker to access certain URLs, such as "/fpui/jsp/index.jsp",...

5.3CVSS0.02776EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/12/15 12:00 a.m.•15 views

CVE-2021-27857: Missing Authorization

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unauthenticated attacker to download a configuration archive. The attacker needs to know or correctly guess the hostname o...

7.5CVSS5.8AI score0.01853EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/12/15 12:00 a.m.•11 views

CVE-2021-27856: Undefined Security Weakness

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA002...

9.8CVSS5.8AI score0.05469EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/12/15 12:00 a.m.•10 views

CVE-2021-27859: Missing Authorization

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticated, remote attacker with read-only privileges to create an account with administrative privileges. Older versions of...

8.8CVSS5.8AI score0.01668EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2021/12/15 12:00 a.m.•9 views

PT-2021-17643

Name of the Vulnerable Software and Affected Versions: FatPipe WARP, IPVPN, and MPVPN software versions prior to 10.1.2r60p91 and 10.2.2r42 Description: A missing authorization vulnerability in the web management interface allows an authenticated, remote attacker with read-only privileges to crea...

8.8CVSS0.01668EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/12/15 12:00 a.m.•4 views

CVE-2021-27855: Missing Authorization

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this...

8.8CVSS5.8AI score0.01657EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies•added 2021/12/15 12:00 a.m.•10 views

PT-2021-17641

Name of the Vulnerable Software and Affected Versions: FatPipe WARP, IPVPN, and MPVPN software versions prior to 10.1.2r60p91 and 10.2.2r42 Description: A missing authorization issue in the web management interface allows a remote, unauthenticated attacker to download a configuration archive. The...

7.5CVSS0.01853EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/12/15 12:00 a.m.•8 views

CVE-2021-27858: Missing Authorization

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote attacker to access at least the URL "/fpui/jsp/index.jsp" leading to unknown impact, presumably some violation of...

5.3CVSS5.9AI score0.02776EPSS
SaveExploits2References3
NVD
NVD•added 2021/12/08 5:15 p.m.•37 views

CVE-2021-27860

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006...

9.8CVSS0.3968EPSS
SaveExploits2References3
CVE
CVE•added 2021/12/08 4:15 p.m.•1160 views

CVE-2021-27860

CVE-2021-27860 affects FatPipe WARP, IPVPN, and MPVPN web management interfaces. An unauthenticated remote attacker can upload arbitrary files to any location on the filesystem on affected devices running versions < 10.1.2r60p92 or

9.8CVSS9.1AI score0.3968EPSS
SaveIn wildExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/12/08 12:00 a.m.•7 views

CVE-2021-27860: Unrestricted Upload of File with Dangerous Type

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006...

9.8CVSS5.8AI score0.3968EPSS
SaveExploits2References2
attackerkb
attackerkb•added 2021/11/16 12:00 a.m.•88 views

CVE-2021-27860

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006...

9.8CVSS5AI score0.3968EPSS
SaveIn wildExploits2References4
Rows per page
Query Builder