Lucene search
+L

3590 matches found

CNNVD
CNNVD
•added 2023/10/18 12:00 a.m.•16 views

Ivanti Endpoint Manager Code Issue Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. A security vulnerability exists in Ivanti Endpoint Manager 2022 SU3 and prior versions, which stems from a vulnerability that allows an attacker to read and disclose files on the server and perform elevation of...

9.8CVSS6.7AI score0.03844EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/17 12:00 a.m.•21 views

The vulnerability of the ICMPv6 network protocol implementation in Junos QFX5K routers allows a attacker to cause a service failure.

The vulnerability of the ICMPv6 network protocol implementation in Junos QFX5K routers lies in the execution of a loop with an unavailable exit condition when processing WAV/AVI format files. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.8CVSS7.4AI score0.00635EPSS
SaveExploits0References3Affected Software1
Circl
Circl
•added 2023/10/10 10:22 p.m.•24 views

CVE-2023-36709

creationtimestamp| type| source ---|---|--- 2023-10-10 22:22:54+00:00| seen| https://t.me/cibsecurity/72012...

7.5CVSS7.8AI score0.02678EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2023/10/10 12:00 a.m.•22 views

October 10, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5031226)

October 10, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5031226 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET...

6.7AI score
SaveExploits0
attackerkb
attackerkb
•added 2023/10/09 4:15 a.m.•12 views

CVE-2023-45356

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is...

8.8CVSS7.3AI score0.01494EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/10/09 4:15 a.m.•11 views

CVE-2023-45349

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr...

7.5CVSS7.1AI score0.00565EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/06 12:00 a.m.•20 views

Vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system, allowing attackers to execute arbitrary commands

The vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

10CVSS7.2AI score0.03556EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/03 12:00 a.m.•17 views

The vulnerability of the /useratte/web.php microprogrammed routing software from D-Link’s DAR-8000 and DAR-7000 routers allows attackers to execute arbitrary commands.

The vulnerability of the /useratte/web.php microprogrammed routing software from D-Link’s DAR-8000 and DAR-7000 routers lies in the ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

6.5CVSS7.1AI score0.22713EPSS
SaveExploits1References5Affected Software2
Circl
Circl
•added 2023/09/26 12:34 a.m.•22 views

CVE-2022-4318

creationtimestamp| type| source ---|---|--- 2023-09-26 00:34:28+00:00| seen| https://t.me/cibsecurity/71015 2026-07-15 14:00:32+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqouzlystt2g...

7.8CVSS6.8AI score0.0029EPSS
SaveExploits0References2
Circl
Circl
•added 2023/09/20 7:29 a.m.•23 views

CVE-2023-25534

creationtimestamp| type| source ---|---|--- 2023-09-20 07:29:55+00:00| seen| https://t.me/cibsecurity/70755...

9.8CVSS8.7AI score0.00555EPSS
SaveExploits0References1
Circl
Circl
•added 2023/09/15 1:25 p.m.•22 views

CVE-2012-3772

creationtimestamp| type| source ---|---|--- 2023-09-15 13:25:53+00:00| seen| https://t.me/cibsecurity/70461...

4.8AI score
SaveExploits0References1
Circl
Circl
•added 2023/09/14 10:30 p.m.•16 views

CVE-2018-4481

creationtimestamp| type| source ---|---|--- 2023-09-14 22:30:53+00:00| seen| https://t.me/cibsecurity/70487...

4.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2023/09/14 9:15 p.m.•11 views

CVE-2023-41159

A Stored Cross-Site Scripting XSS vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually...

5.4CVSS5.9AI score0.00531EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/09/13 12:00 a.m.•21 views

Webmin Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the MIME type program tab...

5.4CVSS5.8AI score0.00526EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/09/13 12:00 a.m.•22 views

Webmin Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the MIME type program tab...

5.4CVSS5.8AI score0.00526EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/09/13 12:00 a.m.•38 views

PT-2023-27833 · Usermin · Usermin

Name of the Vulnerable Software and Affected Versions: Usermin version 2.000 Description: A Stored Cross-Site Scripting XSS issue exists in the MIME type programs tab, allowing remote attackers to inject arbitrary web script or HTML via the description field when creating a new MIME type program...

5.4CVSS5.3AI score0.00526EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/09/13 12:00 a.m.•19 views

Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the cron jobs tab of the...

5.4CVSS5.8AI score0.00494EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/09/12 12:00 a.m.•22 views

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows Server 2016...

7.8CVSS6.6AI score0.00934EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/09/07 12:00 a.m.•24 views

PT-2023-27837 · Usermin · Usermin

Name of the Vulnerable Software and Affected Versions: Usermin version 2.000 Description: Multiple stored cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages, including public key details, Export key, sign...

5.4CVSS5.5AI score0.00494EPSS
SaveExploits0References8
Circl
Circl
•added 2023/09/06 10:18 p.m.•22 views

CVE-2023-20263

creationtimestamp| type| source ---|---|--- 2023-09-06 22:18:08+00:00| seen| https://t.me/cibsecurity/70026...

6.1CVSS7.3AI score0.00584EPSS
SaveExploits0References1
Rows per page
Query Builder