Lucene search
+L

169 matches found

Cvelist
Cvelist
•added 2021/05/07 10:35 a.m.•32 views

CVE-2020-36125

Pax Technology PAXSTORE v7.0.820200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting the endpoint directly...

7AI score0.00939EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/07 12:00 a.m.•7 views

CVE-2020-36125: Missing Authentication for Critical Function

Pax Technology PAXSTORE v7.0.820200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting the endpoint directly...

7.1CVSS5.8AI score0.00939EPSS
SaveExploits1References2
OSV
OSV
•added 2018/10/30 9:29 p.m.•32 views

CVE-2018-16466

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens...

8.1CVSS6.7AI score
SaveExploits0References2
NVD
NVD
•added 2018/10/30 9:29 p.m.•34 views

CVE-2018-16466

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens...

8.1CVSS8AI score0.00957EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/30 12:00 a.m.•7 views

CVE-2018-16466: Improper Access Control

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens...

8.1CVSS7.5AI score0.00957EPSS
SaveExploits0References3
OSV
OSV
•added 2017/10/20 3:29 p.m.•12 views

CVE-2017-6145

iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that...

7.3CVSS5.8AI score0.01053EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2011/06/13 12:00 a.m.•28 views

Mozilla Firefox SSL Certificate Spoofing Vulnerability - Windows

Mozilla Firefox is prone to SSL certificate spoofing vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS9.5AI score0.01502EPSS
SaveExploits2References3
NVD
NVD
•added 2007/06/06 9:30 p.m.•30 views

CVE-2007-0068

IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database...

9.3CVSS6.3AI score0.02184EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2007/06/06 9:00 p.m.•42 views

CVE-2007-0068

IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database...

6.3AI score0.02184EPSS
SaveExploits0References6
Rows per page
Query Builder