Lucene search
+L

2275 matches found

Prion
Prion
added 2019/11/22 7:15 p.m.29 views

Code injection

W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes...

5CVSS7.2AI score0.02318EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2019/11/22 6:55 p.m.44 views

CVE-2012-6079

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys...

7.4AI score0.02134EPSS
SaveExploits0References4
CVE
CVE
added 2019/11/22 6:55 p.m.189 views

CVE-2012-6079

CVE-2012-6079 affects the WordPress plugin W3 Total Cache prior to version 0.9.2.5. The described issue allows an attacker to retrieve sensitive cached database information by guessing or accessing hash keys, effectively disclosing data from the cache layer remotely. This vulnerability is documen...

7.5CVSS7.4AI score0.02134EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2019/11/22 6:50 p.m.148 views

CVE-2012-6078

W3 Total Cache (WordPress plugin) before version 0.9.2.5 generates hash keys insecurely, enabling remote attackers to predict hash values. Affected: W3 Total Cache plugin (WordPress). Root cause: insecure hash key generation. Impact: information exposure via predictable hashes. Remediation: upgra...

7.5CVSS7.5AI score0.02318EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2019/11/22 6:50 p.m.51 views

CVE-2012-6078

W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes...

7.5AI score0.02318EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2019/11/22 6:44 p.m.44 views

CVE-2012-6077

W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files...

7.5AI score0.05378EPSS
SaveExploits0References5
CVE
CVE
added 2019/11/22 6:44 p.m.269 views

CVE-2012-6077

The CVE-2012-6077 issue affects the WordPress W3 Total Cache plugin (versions before 0.9.2.5). The root cause is insecure storage of database cache files, enabling remote attackers to retrieve password hash information. Documents indicate exposure of usernames and password hashes via the plugin’s...

7.5CVSS7.5AI score0.05378EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2019/11/22 12:00 a.m.11 views

PT-2019-6805 · Frederick Townes · W3 Total Cache

Name of the Vulnerable Software and Affected Versions: W3 Total Cache versions prior to 0.9.2.5 Description: The issue allows remote attackers to retrieve password hash information due to insecure storage of database cache files. Recommendations: For versions prior to 0.9.2.5, update to version...

7.5CVSS7.6AI score0.05378EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2019/11/22 12:00 a.m.11 views

PT-2019-6807 · Unknown · W3 Total Cache

Name of the Vulnerable Software and Affected Versions: W3 Total Cache versions prior to 0.9.2.5 Description: The issue allows remote attackers to download sensitive cached database information via their hash keys. Recommendations: For versions prior to 0.9.2.5, update to version 0.9.2.5 or later ...

7.5CVSS7.5AI score0.02134EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2019/11/22 12:00 a.m.13 views

PT-2019-6806 · Frederick Townes · W3 Total Cache

Name of the Vulnerable Software and Affected Versions: W3 Total Cache versions prior to 0.9.2.5 Description: The issue allows remote attackers to predict the values of hashes due to insecure hash key generation. Recommendations: For versions prior to 0.9.2.5, update to version 0.9.2.5 or later to...

7.5CVSS7.6AI score0.02318EPSS
SaveExploits1References6
Check Point Advisories
Check Point Advisories
added 2019/11/17 12:00 a.m.66 views

WordPress W3 Total Cache Plugin Arbitrary File Read (CVE-2019-6715)

An Arbitrary File Read vulnerability exists in WordPress W3 Total Cache plugin. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary web script into the effected system...

5CVSS5.9AI score0.19396EPSS
SaveExploits4
CNVD
CNVD
added 2019/11/15 12:00 a.m.11 views

McAfee Total Protection Elevation of Privilege Vulnerability

McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An elevation of privilege vulnerability exists in McAfee Total Protection. An attacker could execute arbitrary code by placing a malicious file in a specific location protected by administrator privileg...

7.2CVSS7.9AI score0.00661EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/15 12:00 a.m.10 views

Unspecified Vulnerability in Omron CX-Supervisor (CNVD-2019-42429)

Omron CX-Supervisor is a visual machine controller from Omron Japan. An unspecified vulnerability exists in CX-Supervisor, which can be exploited by an attacker to cause information disclosure, total system compromise, and denial of service...

8.8CVSS6.7AI score0.01735EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/13 9:15 a.m.11 views

CVE-2019-3648

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...

6.7CVSS6.9AI score0.00661EPSS
SaveExploits0References2
NVD
NVD
added 2019/11/13 9:15 a.m.35 views

CVE-2019-3648

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...

7.2CVSS6.6AI score0.00661EPSS
SaveExploits0References2
Prion
Prion
added 2019/11/13 9:15 a.m.29 views

Privilege escalation

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...

7.2CVSS6.7AI score0.00661EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2019/11/13 8:55 a.m.69 views

CVE-2019-3648

CVE-2019-3648 is a local privilege-escalation in McAfee Total Protection for Windows (client) affecting 16.0.R22 and earlier. The root cause is privilege-protected file placements that allow an administrator to execute arbitrary code. Impact is local code execution with elevated privileges if a a...

7.2CVSS6.6AI score0.00661EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2019/11/13 8:55 a.m.45 views

CVE-2019-3648 Implicit loading of DLLs

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...

6.1CVSS6.8AI score0.00661EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2019/11/12 2:47 p.m.433 views

Exploit for CVE-2019-6715

cve-2019-6715 Shout out to TomNomNom for 99.9% of his cod...

7.5CVSS7.7AI score0.19396EPSS
SaveExploits4
Symantec
Symantec
added 2019/11/12 12:00 a.m.32 views

McAfee Total Protection CVE-2019-3648 Local Privilege Escalation Vulnerability

Description Multiple McAfee products are prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. McAfee Total Protection MTP version 16.0.R22 and prior are vulnerable. Technologies Affected McAfee Total Protection 16.0.R17 McAfee Total...

2.5AI score0.00661EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder