Lucene search
+L

213 matches found

ATTACKERKB
ATTACKERKB
added 2021/12/22 1:15 p.m.6 views

CVE-2021-40612

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in codeigniter/application/controllers/util.php allows an attacker perform command execution without echoes...

9.8CVSS7.5AI score0.02006EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/22 1:15 p.m.18 views

CVE-2021-40612

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in codeigniter/application/controllers/util.php allows an attacker perform command execution without echoes...

9.8CVSS7AI score
SaveExploits0References2
Prion
Prion
added 2021/12/22 1:15 p.m.19 views

Authentication flaw

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in codeigniter/application/controllers/util.php allows an attacker perform command execution without echoes...

7.5CVSS9.4AI score0.02006EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/12/22 12:12 p.m.58 views

CVE-2021-40612

CVE-2021-40612 refers to an unauthenticated remote command execution in Opmantek Open-AudIT up to version 3.5.0, caused by a vulnerability in code_igniter/application/controllers/util.php . The issue allows an attacker to execute commands without authentication and without echoes. The available c...

9.8CVSS9.5AI score0.02006EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/22 12:12 p.m.28 views

CVE-2021-40612

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in codeigniter/application/controllers/util.php allows an attacker perform command execution without echoes...

9.7AI score0.02006EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/12/22 12:00 a.m.10 views

Opmantek Open-AudIT 安全漏洞

Opmantek Open-AudIT is an open source network discovery and auditing program from Opmantek USA. The program intelligently scans networks and network devices and provides status reports. A security vulnerability in Opmantek Open-AudIT prior to version 3.5.0, which originated in...

9.8CVSS8.5AI score0.02006EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/20 12:15 p.m.24 views

CVE-2021-44916

Opmantek Open-AudIT Community 4.2.0 Fixed in 4.3.0 is affected by a Cross Site Scripting XSS vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser...

6.1CVSS6AI score
SaveExploits0References4
NVD
NVD
added 2021/12/20 12:15 p.m.44 views

CVE-2021-44916

Opmantek Open-AudIT Community 4.2.0 Fixed in 4.3.0 is affected by a Cross Site Scripting XSS vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser...

6.1CVSS0.03709EPSS
SaveExploits4References4
ATTACKERKB
ATTACKERKB
added 2021/12/20 12:15 p.m.14 views

CVE-2021-44916

Opmantek Open-AudIT Community 4.2.0 Fixed in 4.3.0 is affected by a Cross Site Scripting XSS vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser...

6.1CVSS6.4AI score0.03709EPSS
SaveExploits4References5
Prion
Prion
added 2021/12/20 12:15 p.m.21 views

Cross site scripting

Opmantek Open-AudIT Community 4.2.0 Fixed in 4.3.0 is affected by a Cross Site Scripting XSS vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser...

4.3CVSS5.9AI score0.03709EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
added 2021/12/20 11:31 a.m.43 views

CVE-2021-44916

Opmantek Open-AudIT Community 4.2.0 Fixed in 4.3.0 is affected by a Cross Site Scripting XSS vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser...

6.1AI score0.03709EPSS
SaveExploits4References4
CVE
CVE
added 2021/12/20 11:31 a.m.70 views

CVE-2021-44916

Open-AudIT Community 4.2.0 is affected by a Cross-Site Scripting (XSS) vulnerability that arises because user-passed values are not properly filtered/escaped when supplied via a URL. The issue enables execution of JavaScript in the victim’s browser and is fixed in version 4.3.0. The vulnerability...

6.1CVSS5.9AI score0.03709EPSS
SaveExploits4References4Affected Software1
CNNVD
CNNVD
added 2021/12/20 12:00 a.m.9 views

Opmantek Open-AudIT 跨站脚本漏洞

Opmantek Open-AudIT is an open source network discovery and auditing program from Opmantek USA. The program intelligently scans networks and network devices and provides status reports. A cross-site scripting vulnerability exists in Opmantek Open-AudIT Community version 4.2.0, which stems from th...

6.1CVSS6AI score0.03709EPSS
SaveExploits4References7
CNVD
CNVD
added 2021/02/07 12:00 a.m.10 views

Opmantek Open-AudIT cross-site scripting vulnerability (CNVD-2021-10491)

Open-AudIT is a network auditing application, based on the scripting languages PHP, Bash and VBScript, that tells you what's on your network, how it's configured, and if any changes have been made. A cross-site scripting vulnerability exists in Open-AudIT 4.0.1. An attacker can exploit this...

6.1CVSS6.2AI score0.00757EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/05 2:15 p.m.9 views

CVE-2021-3333

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting XSS. When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link...

6.1CVSS5.7AI score0.00757EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/05 2:15 p.m.25 views

CVE-2021-3333

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting XSS. When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link...

6.1CVSS0.00757EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/05 2:15 p.m.19 views

Cross site scripting

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting XSS. When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link...

4.3CVSS6.1AI score0.00757EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/05 2:15 p.m.10 views

CVE-2021-3333

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting XSS. When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link...

6.1CVSS6.2AI score0.00757EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/02/05 1:01 p.m.34 views

CVE-2021-3333

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting XSS. When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link...

6.3AI score0.00757EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/05 1:01 p.m.71 views

CVE-2021-3333

Open‑AudIT 4.0.1 from Opmantek is affected by a cross‑site scripting (XSS) vulnerability. The flaw occurs when the application outputs SQL statements for debugging; a crafted query can trigger an XSS attack, and exploitation requires the user to be already authenticated to the Open‑AudIT instance...

6.1CVSS6.1AI score0.00757EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder