Lucene search
+L

14222 matches found

CNNVD
CNNVD
added 2024/03/20 12:00 a.m.13 views

Progress MOVEit Transfer Security Vulnerability

Progress MOVEit Transfer is a secure hosted file transfer application from Progress. A security vulnerability exists in Progress MOVEit Transfer that stems from the presence of a logging bypass vulnerability. An attacker could use this vulnerability to bypass the logging mechanism in the web...

4.3CVSS6.6AI score0.00385EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/20 12:00 a.m.11 views

PT-2024-19605 · Ipswitch · Moveit Transfer

Name of the Vulnerable Software and Affected Versions: MOVEit Transfer versions prior to 2022.0.11 14.0.11 MOVEit Transfer versions prior to 2022.1.12 14.1.12 MOVEit Transfer versions prior to 2023.0.9 15.0.9 MOVEit Transfer versions prior to 2023.1.4 15.1.4 Description: A logging bypass issue ha...

4.3CVSS7.1AI score0.00385EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.11 views

The vulnerability of the aiohttp HTTP client, related to deficiencies in handling HTTP request headers, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the aiohttp HTTP client is related to deficiencies in the handling of HTTP request headers. Exploiting this vulnerability allows an attacker to send hidden HTTP requests remotely HTTP Request Smuggling attack...

7.8CVSS6.5AI score0.00857EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.12 views

The vulnerability of the aiohttp HTTP client, related to deficiencies in handling headers like Content-Length and Transfer-Encoding, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the aiohttp HTTP client is related to deficiencies in handling headers such as Content-Length and Transfer-Encoding. Exploiting this vulnerability allows an attacker to send hidden HTTP requests remotely HTTP Request Smuggling attack...

6.5CVSS6.3AI score0.00827EPSS
SaveExploits1References4Affected Software2
CNVD
CNVD
added 2024/03/19 12:00 a.m.35 views

IBM Sterling Secure Proxy Cross-Site Scripting Vulnerability (CNVD-2024-15368)

IBM Sterling Secure Proxy is an application proxy from International Business Machines IBM that is used to ensure the secure transfer of files in an organization's unprotected zone DMZ. A cross-site scripting vulnerability exists in IBM Sterling Secure Proxy versions 6.0.3 and 6.1.0, which stems...

5.4CVSS5.6AI score0.00362EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/19 12:00 a.m.7 views

IBM Sterling Secure Proxy Information Disclosure Vulnerability (CNVD-2024-14665)

IBM Sterling Secure Proxy is an application proxy from International Business Machines IBM that is used to ensure the secure transfer of files in an organization's unprotected zone DMZ. An information disclosure vulnerability exists in IBM Sterling Secure Proxy versions 6.0.3 and 6.1.0, which...

4CVSS6AI score0.0018EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/03/18 11:15 a.m.35 views

CVE-2023-52611

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host maxreqsize in the RX path Lukas reports skboverpanic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D G12B SoC and a RTL8822CS SDIO wifi/Bluetooth combo card. The error he observ...

5.5CVSS6.2AI score0.00224EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment
added 2024/03/18 10:07 a.m.30 views

CVE-2023-52611 wifi: rtw88: sdio: Honor the host max_req_size in the RX path

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host maxreqsize in the RX path Lukas reports skboverpanic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D G12B SoC and a RTL8822CS SDIO wifi/Bluetooth combo card. The error he observ...

7AI score0.00224EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/15 12:00 a.m.14 views

The vulnerability of the Captive Portal authentication system for operating systems FortiOS and proxy servers, designed to protect against Internet attacks by FortiProxy, allows a perpetrator to execute arbitrary codes or commands.

The vulnerability of Captive Portal for FortiOS operating systems and proxy servers, designed to protect against Internet attacks using FortiProxy, is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands through...

8.1CVSS8.5AI score0.01083EPSS
SaveExploits0References5Affected Software2
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.11 views

WordPress Plugin Maintenance Page Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.12 views

PT-2024-2575 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Secure Copy Protocol SCP and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system...

6.5CVSS7.1AI score0.00146EPSS
SaveExploits0References5
Redos
Redos
added 2024/03/13 12:00 a.m.27 views

ROS-2-805

2.805 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability description: A corrective release of the OpenVPN Virtual Private Networking Package 2.4.9 has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

3.7CVSS7.2AI score0.01609EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.9 views

WordPress Plugin Simple Restrict Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.4AI score0.00542EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/12 9:15 a.m.20 views

CVE-2024-2371

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials...

6.2CVSS6.2AI score0.00183EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/12 12:00 a.m.63 views

Apache InLong Code Issue Vulnerability (CNVD-2024-16113)

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A code issue vulnerability exists in Apache InLong versions 1.8.0 through 1.10.0, which can be exploited by an attacker to read...

9.1CVSS6.9AI score0.0122EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/11 6:15 p.m.16 views

UBUNTU-CVE-2023-52493

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parsexferevent such that a callback given to client can potentially queu...

5.5CVSS6AI score0.00209EPSS
SaveExploits0References22
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.29 views

Fedora: Security Advisory for jsch (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
CNVD
CNVD
added 2024/03/08 12:00 a.m.12 views

IBM Aspera Input Validation Error Vulnerability

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. An input validation error vulnerability exists in IBM Aspera Faspex versions 5.0.0 and 5.0.1, which stems from incorrect input validation of the HOST header a...

6.5CVSS6.3AI score0.00369EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.25 views

Fedora: Security Advisory for maven-artifact-transfer (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.27 views

[SECURITY] Fedora 40 Update: maven-artifact-transfer-0.13.1-14.fc40

An API to either install or deploy artifacts with Maven 3...

8.8CVSS6.8AI score0.02578EPSS
SaveExploits3
Rows per page
Query Builder