Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.3 views

MiracleLinux 8 : nodejs:12 (AXSA:2020-792:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-792:01 advisory. nodejs-dot-prop: prototype pollution CVE-2020-8116 nodejs: HTTP request smuggling due to CR-to-Hyphen conversion CVE-2020-8201 npm: Sensitive...

9.3CVSS7.5AI score0.07646EPSS
Exploits5References9
RedhatCVE
RedhatCVE
added 2025/05/22 5:51 p.m.6 views

CVE-2020-12349

Improper input validation in the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access...

6.5CVSS6.4AI score0.00863EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:57 a.m.4 views

CVE-2019-9438

In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of information about installed packages for other users with no additional execution privileges needed. User interaction is not needed for exploitation. Product...

3.3CVSS6.1AI score0.00138EPSS
Exploits0References1
CVE
CVE
added 2024/12/17 5:41 p.m.95 views

CVE-2024-49819

CVE-2024-49819 affects IBM Security Guardium Key Lifecycle Manager (GKLM) versions 4.1, 4.1.1, 4.2.0, and 4.2.1. The flaw could allow a remote attacker to obtain sensitive information in cleartext over a sniffable communication channel. The IBM security bulletin lists this as a network-friendly v...

7.5CVSS4AI score0.00253EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.2 views

PT-2023-18082 · Unknown · Package Manager

Name of the Vulnerable Software and Affected Versions: Package Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

5.5CVSS5AI score0.00092EPSS
Exploits0References3
OSV
OSV
added 2022/03/17 1:15 p.m.6 views

CVE-2021-44260

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

7.5CVSS5.8AI score0.07573EPSS
Exploits1References1
Prion
Prion
added 2022/03/17 1:15 p.m.17 views

Authentication flaw

A vulnerability is in the 'livemfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router...

5CVSS7.4AI score0.07573EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder