Lucene search
+L

417 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 7:30 p.m.23 views

CVE-2022-0386

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710...

8.8CVSS7.9AI score0.01183EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.4 views

WordPress plugin ARS Affiliate Page Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS7.2AI score0.00352EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/12 1:15 p.m.14 views

CVE-2024-39340

The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has...

8.8CVSS0.0091EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/07/12 12:0 a.m.23 views

CVE-2024-39340

The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has...

0.0091EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/07/12 12:0 a.m.15 views

CVE-2024-39340

The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has...

8.9AI score0.0091EPSS
SaveExploits0References3
CVE
CVE
added 2024/07/12 12:0 a.m.51 views

CVE-2024-39340

CVE-2024-39340 affects Securepoint UTM and related products. The authenticated OTP mechanism mishandles OTP keys, allowing bypass of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include Securepoint UTM 11.5 through ...

8.8CVSS8.9AI score0.0091EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/21 12:0 a.m.9 views

PT-2024-5353 · Securepoint · Securepoint Utm

Name of the Vulnerable Software and Affected Versions: Securepoint UTM versions 11.5 through 12.6.4 Securepoint UTM Reseller Preview version 12.7.0 Description: The issue is related to the authentication system of Securepoint UTM, specifically with the handling of One-Time Password OTP keys. This...

10CVSS7.5AI score0.0091EPSS
SaveExploits0References10
VulnCheck KEV
VulnCheck KEV
added 2023/12/04 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-22620

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to the administrative interface...

7.5CVSS7.1AI score0.0392EPSS
SaveExploits4References1
OSV
OSV
added 2023/07/14 3:15 p.m.7 views

CVE-2023-36831

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

7.5CVSS5.8AI score0.00632EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/14 3:15 p.m.42 views

CVE-2023-36831

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

7.5CVSS0.00632EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/14 3:15 p.m.29 views

Input validation

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

5CVSS7.5AI score0.00632EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/14 2:56 p.m.45 views

CVE-2023-36831 Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

7.5CVSS7.7AI score0.00632EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/14 2:56 p.m.18 views

CVE-2023-36831 Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

7.5CVSS6.8AI score0.00632EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/14 2:56 p.m.66 views

CVE-2023-36831

CVE-2023-36831 affects Juniper Networks Junos OS SRX Series. The jbuf memory leak occurs when SSL Proxy and UTM Web-Filtering are enabled, leading to a DoS with service restoration only via reboot. Affected versions are: 22.2 before 22.2R3; 22.3 before 22.3R2-S1, 22.3R3; 22.4 before 22.4R1-S2, 22...

7.5CVSS7.5AI score0.00632EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/14 12:0 a.m.19 views

Juniper Networks Junos OS SRX 安全漏洞

Juniper Networks Junos OS SRX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS SRX that originates from a check or...

7.5CVSS7.3AI score0.00632EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/12 2:15 p.m.12 views

CVE-2023-23822

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/12 2:15 p.m.5 views

CVE-2023-23822

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/12 2:15 p.m.12 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/12 1:33 p.m.22 views

CVE-2023-23822 WordPress UTM Tracker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/12 1:33 p.m.12 views

CVE-2023-23822 WordPress UTM Tracker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder