Lucene search
+L

2465 matches found

Cvelist
Cvelist
added 2019/03/07 10:00 p.m.42 views

CVE-2018-18815 TIBCO JasperReports Server User Information Disclosure

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability tha...

10CVSS9.5AI score0.03132EPSS
SaveExploits0References5
OSV
OSV
added 2019/03/05 8:29 p.m.11 views

CVE-2019-6565

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script...

6.1CVSS6.3AI score0.01089EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/02/28 4:00 p.m.27 views

CVE-2019-3599 McAfee Agent update fixes an Information Disclosure vulnerability

Information Disclosure vulnerability in Remote logging which is disabled by default in McAfee Agent MA 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled...

6.5CVSS7.3AI score0.01822EPSS
SaveExploits0References1
CVE
CVE
added 2019/02/28 4:00 p.m.75 views

CVE-2019-3598

CVE-2019-3598 affects McAfee Agent (MA) 5.x where a bug in how UDP requests are processed leads to a denial of service when handling specially crafted UDP packets. The vulnerability allows remote, unauthenticated attackers to potentially cause the MA service to stop responding, reducing availabil...

5.3CVSS5.3AI score0.01851EPSS
SaveExploits0References2Affected Software1
zdt
zdt
added 2019/02/28 12:00 a.m.73 views

Feng Office 3.7.0.5 - Remote Command Execution Exploit

Exploit for php platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Feng Office 3.7.0.5 - Unauthenticated Remote Command...

0.1AI score
SaveExploits0
attackerkb
attackerkb
added 2019/02/26 12:00 a.m.110 views

elFinder Command Injection v<2.1.48

elFinder is an open-source file manager available as a web application. A command injection vulnerability in the image handling functionality exists for versions prior to 2.1.48. This exploit requires that the exiftran utility be installed. Recent assessments: space-r7 at May 09, 2019 5:57pm UTC...

9.8CVSS1.7AI score0.92667EPSS
SaveExploits11References7
Cvelist
Cvelist
added 2019/02/01 4:00 p.m.35 views

CVE-2019-3604 ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities

Cross-Site Request Forgery CSRF vulnerability in McAfee ePO legacy Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors...

4.8CVSS8.6AI score0.00429EPSS
SaveExploits0References2
Prion
Prion
added 2019/02/01 3:29 p.m.25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in McAfee ePO legacy Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors...

6.8CVSS8.5AI score0.00429EPSS
SaveExploits0References2
Veracode
Veracode
added 2019/01/15 9:22 a.m.27 views

Unauthorized Access To Storage Volumes

libglusterfs.so is vulnerable to unauthorized access to storage volumes. The vulnerability exists due to the fix introduced for CVE-2018-1112, allowing unauthenticated users to mount the storage volumes...

8.8CVSS8.2AI score0.02616EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
added 2019/01/03 12:00 a.m.60 views

Apache CouchDB < 2.3.0 Remote Privilege Escalation Vulnerability - Linux

CouchDB is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.2CVSS7.1AI score0.03093EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/01/02 2:29 p.m.31 views

CVE-2018-17188

Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full...

7.2CVSS6.8AI score0.03093EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/02 2:29 p.m.26 views

CVE-2018-17188

Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full...

7.2CVSS7AI score
SaveExploits0References4
Prion
Prion
added 2019/01/02 2:29 p.m.27 views

Design/Logic Flaw

Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full...

6.5CVSS7.2AI score0.03093EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2019/01/02 2:00 p.m.38 views

CVE-2018-17188

Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full...

7.3AI score0.03093EPSS
SaveExploits0References4
Veracode
Veracode
added 2018/12/18 8:33 a.m.28 views

Local File Inclusion (LFI)

rendertron is vulnerable to local file inclusion LFI attacks. The vulnerability exists due to the ability to include file:/// via alternative protocols which allows unauthenticated users to read local files...

7.5CVSS7.2AI score0.01098EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2018/12/17 10:00 p.m.39 views

CVE-2018-7833

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...

7.5AI score0.01346EPSS
SaveExploits0References1
Veracode
Veracode
added 2018/11/23 2:24 a.m.20 views

Local File Inclusion (LFI)

athlon1600/php-proxy-app is vulnerable to local file inclusion LFI attacks. The vulnerability exists due to the ability to include file:/// in the value of q, which allows unauthenticated users to read local files...

7.5CVSS7.2AI score0.13731EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2018/11/12 4:29 p.m.8 views

CVE-2018-19203

PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request...

7.5CVSS5.8AI score0.02684EPSS
SaveExploits0References3
Metasploit
Metasploit
added 2018/11/08 12:00 a.m.86 views

WordPress WP GDPR Compliance Plugin Privilege Escalation

The Wordpress GDPR Compliance plugin use auxiliary/admin/http/wp/gdprcomplianceprivesc msf undefinedgdprcomplianceprivesc show actions ...actions... msf undefinedgdprcomplianceprivesc set ACTION msf undefinedgdprcomplianceprivesc show options ...show and set options... msf...

9.8CVSS8.4AI score0.85176EPSS
SaveExploits4
Hacker One
Hacker One
added 2018/10/24 2:31 p.m.29 views

Nextcloud: Talk / spreed: Disclosure of Room names and participants for password protected rooms

CVSS ---- 5.3 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS isn't always as fine-grained as I'd like; personally, I would rate the issue somewhere between low and medium Description ----------- The API of the official spreed/talk extension reveals potentially sensitive information such...

0.8AI score
SaveExploits0
Rows per page
Query Builder