Lucene search
+L

52 matches found

PostrgeSql
PostrgeSql
•added 2018/02/08 12:00 a.m.•625 views

Vulnerability in client (CVE-2018-1053)

pgupgrade creates file of sensitive metadata under prevailing umask...

7CVSS6.4AI score0.00482EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2014/08/21 2:55 p.m.•12 views

CVE-2014-3562

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory...

6.2AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/08/21 12:00 a.m.•4 views

CVE-2014-3562: Exposure of Sensitive Information to an Unauthorized Actor

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory...

5CVSS5.9AI score0.02198EPSS
SaveExploits0References2
NVD
NVD
•added 2014/05/12 2:55 p.m.•32 views

CVE-2014-2301

OrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf operations op=inf to an object in pub/bscw.cgi/...

5CVSS6.3AI score0.02253EPSS
SaveExploits3References3
Prion
Prion
•added 2014/05/12 2:55 p.m.•25 views

Buffer overflow

OrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf operations op=inf to an object in pub/bscw.cgi/...

5CVSS6.9AI score0.02253EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
•added 2014/05/12 2:00 p.m.•43 views

CVE-2014-2301

OrbiTeam BSCW before 5.0.8 allows remote attackers to obtain sensitive metadata via the inf operations op=inf to an object in pub/bscw.cgi/...

6.3AI score0.02253EPSS
SaveExploits3References3
CVE
CVE
•added 2014/05/12 2:00 p.m.•65 views

CVE-2014-2301

OrbiTeam BSCW contains an information-disclosure flaw in the pub/bscw.cgi/?op=inf path. Versions ≤ 5.0.7 (pre-5.0.8) allow unauthenticated attackers to read metadata for internal objects (e.g., filenames, and potentially email addresses). The root cause is information leakage via the inf operatio...

5CVSS6.5AI score0.02253EPSS
SaveExploits3References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/05/12 12:00 a.m.•3 views

PT-2014-4612

Name of the Vulnerable Software and Affected Versions OrbiTeam BSCW versions prior to 5.0.8 Description The issue allows remote attackers to obtain sensitive metadata. This is achieved by performing inf operations op=inf to an object in "pub/bscw.cgi/". Recommendations For versions prior to 5.0.8...

5CVSS0.02253EPSS
SaveExploits3References4
NVD
NVD
•added 2014/01/07 6:55 p.m.•51 views

CVE-2013-6419

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by 1...

5CVSS6.2AI score0.01852EPSS
SaveExploits1References7
Prion
Prion
•added 2014/01/07 6:55 p.m.•33 views

Design/Logic Flaw

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by 1...

5CVSS6.7AI score0.01852EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
•added 2014/01/07 6:00 p.m.•74 views

CVE-2013-6419

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by 1...

5CVSS6.1AI score0.01852EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2013/12/11 3:00 p.m.•38 views

CVE-2013-6419

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by 1...

5CVSS5.9AI score0.01852EPSS
SaveExploits1References2
Rows per page
Query Builder