Lucene search
+L

8801 matches found

Cvelist
Cvelist
added 2021/04/08 12:57 p.m.35 views

CVE-2021-28924

Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page...

6.1AI score0.09246EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/08 4:15 a.m.5 views

CVE-2021-1399

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

4.3CVSS5.8AI score0.00615EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/08 4:15 a.m.23 views

CVE-2021-1399

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

4.3CVSS0.00615EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/08 4:15 a.m.19 views

Authorization

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

4CVSS4.5AI score0.00615EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/08 4:05 a.m.34 views

CVE-2021-1399 Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

4.3CVSS4.8AI score0.00615EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/04/08 4:05 a.m.10 views

CVE-2021-1399 Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

4.3CVSS6.5AI score0.00615EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/08 4:05 a.m.101 views

CVE-2021-1399

Cisco CVE-2021-1399 affects the Self Care Portal in Cisco Unified Communications Manager (CUCM) and CUCM Session Management Edition (CUCM SME). Root cause: insufficient validation of user-supplied data in the Self Care Portal, enabling an authenticated, remote attacker to modify data via a crafte...

4.3CVSS4.4AI score0.00615EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/04/08 12:00 a.m.8 views

Cisco Unified Communications Manager Authorization Bypass Vulnerability

Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution.Cisco Unified Communications Manager Session Management Edition is t...

4.3CVSS6.4AI score0.00615EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/08 12:00 a.m.11 views

Nagios 跨站脚本漏洞

Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A Self-XSS vulnerability exists in Nagios Network Analyzer versions prior to 2.4.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via...

6.1CVSS5.2AI score0.09246EPSS
SaveExploits1References3
ThreatPost
ThreatPost
added 2021/04/07 4:47 p.m.245 views

Fake Netflix App on Google Play Spreads Malware Via WhatsApp

Malware disguised as a Netflix app, lurking on the Google Play store, spread through WhatsApp messages, researchers have discovered. According to a Check Point Research analysis released on Wednesday, the malware masqueraded as an app called “FlixOnline,” which advertised via WhatsApp messages...

SaveExploits0References7
Cisco
Cisco
added 2021/04/07 4:00 p.m.65 views

Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

4.3CVSS4.4AI score0.00615EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/07 12:00 a.m.8 views

Cisco Cisco Self Care Portal 安全漏洞

Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution.Cisco Unified Communications Manager Session Management Edition is t...

4.3CVSS5.7AI score0.00615EPSS
SaveExploits0References4
Citrix
Citrix
added 2021/04/07 12:00 a.m.20 views

Driving the Citrix Receiver Self-Service Plug-in Programmatically

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The Self-Service Plugin SSP is the component within Receiver 4.0 onwards that is responsible for...

6.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2021/04/06 3:08 p.m.64 views

Moderate: Red Hat Security Advisory: 389-ds:1.4 security and bug fix update

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

5.3CVSS6.2AI score0.01538EPSS
SaveExploits0References5
Wired Threat Level
Wired Threat Level
added 2021/04/02 10:56 p.m.53 views

Myanmar’s Internet Shutdown Is an Act of ‘Vast Self-Harm’

On Friday the military junta shut off connectivity across the country. There’s no sign of when it will return...

3.4AI score
SaveExploits0
CNNVD
CNNVD
added 2021/04/02 12:00 a.m.12 views

GitLab 跨站脚本漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view the contents of a project's files, commit history, bug lists, and more. A security vulnerability exists in GitLab CE/EE...

6.3CVSS5.8AI score0.00939EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/04/01 12:00 a.m.51 views

Microsoft SharePoint Server 2010 < 14.0.7261.5000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. - A...

8.7CVSS7.4AI score0.71095EPSS
SaveExploits6References22
Tenable Nessus
Tenable Nessus
added 2021/03/26 12:00 a.m.26 views

Fedora 32 : lib3mf (2021-6945629745)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-6945629745 advisory. - A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted...

8.1CVSS8AI score0.0417EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2021/03/25 11:43 a.m.54 views

Forcing Self-Service Password Reset (SSPR) Registration to Increase ROI

When your organization invests in a new product or service, it is essential that you take advantage of all the features it has to offer. This will help you to maximize your return on investment ROI. If you have purchased or are thinking about purchasing a self-service password reset SSPR tool, on...

0.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/03/25 11:43 a.m.10 views

Forcing Self-Service Password Reset (SSPR) Registration to Increase ROI

When your organization invests in a new product or service, it is essential that you take advantage of all the features it has to offer. This will help you to maximize your return on investment ROI. If you have purchased or are thinking about purchasing a self-service password reset SSPR tool, on...

5.9AI score
SaveExploits0
Rows per page
Query Builder