17463 matches found
PT-2023-4796 · Splunk · Splunk Enterprise
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.2.12 Splunk Enterprise versions prior to 9.0.6 Splunk Enterprise versions prior to 9.1.1 Description: The issue is related to the Splunk Web interface of the Splunk Enterprise platform for operational...
PT-2023-4590 · Cisco · Cisco Integrated Management Controller
Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC affected versions not specified Description: The issue exists due to insufficient validation of user input in the web-based management interface. An attacker could exploit this by persuading a user t...
PT-2023-4585 · Cisco · Cisco Evolved Programmable Network Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the web-based...
H2 Web Interface Create Alias Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'H2 Web Interface Create Alias RCE', 'Description' = %q The H2 database contains an alias function which allows for arbitrary Java code to be used...
PT-2023-4435 · Cisco · Cisco Evolved Programmable Network Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of...
H2 Database Web Interface Create Alias Remote Code Execution Exploit
The H2 database contains an alias function which allows for arbitrary Java code to be used. This functionality can be abused to create an exec functionality to pull our payload down and execute it. H2's web interface contains restricts MANY characters, so injecting a payload directly is not...
PT-2023-4583 · Cisco · Cisco Evolved Programmable Network Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of...
PT-2023-4581 · Cisco · Cisco Unified Communications Manager Im & Presence Service +2
Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions prior to the fixed version Cisco Unified CM Session Management Edition versions prior to the fixed version Cisco Unified Communications Manager IM & Presence Service versions prior to the fixed...
PT-2023-4433 · Cisco · Cisco Evolved Programmable Network Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remo...
CVE-2018-10054
creationtimestamp| type| source ---|---|--- 2023-08-15 20:50:36+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/h2webinterfacerce.rb 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:48:37+00:00| seen|...
CVE-2023-4328
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows...
CVE-2023-4338
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers...
CVE-2023-4333
Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server...
CVE-2023-4344
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...
CVE-2023-4327
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux...
CVE-2023-4342
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy...
CVE-2023-4331
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...
CVE-2023-4342
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy...