Lucene search
+L

19878 matches found

OSV
OSV
added 2025/02/04 3:15 p.m.10 views

CVE-2024-9644

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the normal "apply.cgi" endpoint. A remote...

9.8CVSS5.8AI score0.00673EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/04 3:15 p.m.19 views

CVE-2024-9644

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the normal "apply.cgi" endpoint. A remote...

9.8CVSS0.00673EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/04 2:58 p.m.22 views

CVE-2024-9644 Four-Faith F3x36 bapply.cgi Auth Bypass

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the normal "apply.cgi" endpoint. A remote...

9.8CVSS0.00673EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/04 2:58 p.m.16 views

CVE-2024-9644 Four-Faith F3x36 bapply.cgi Auth Bypass

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the normal "apply.cgi" endpoint. A remote...

9.8CVSS7.4AI score0.00673EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/04 12:00 a.m.15 views

PT-2025-3731

Name of the Vulnerable Software and Affected Versions Four-Faith F3x36 router version 2.0.0 Description The issue is related to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via...

10CVSS7.3AI score0.03039EPSS
SaveExploits0References23
VulnCheck KEV
VulnCheck KEV
added 2025/02/02 12:00 a.m.5 views

VulnCheck KEV: CVE-2024-6298

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely...

10CVSS6.2AI score0.1901EPSS
SaveExploits4References1
CNNVD
CNNVD
added 2025/01/30 12:00 a.m.12 views

Santesoft Sante PACS Server 路径遍历漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft Cyprus. Used to store, archive, manage, view and burn medical images. A path traversal vulnerability exists in Santeso...

5.3CVSS5.5AI score0.01862EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/30 12:00 a.m.15 views

Santesoft Sante PACS Server 缓冲区错误漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft Cyprus. Used to store, archive, manage, view and burn medical images. A buffer error vulnerability exists in Santesoft...

8.2CVSS8.3AI score0.00878EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/30 12:00 a.m.9 views

Sante PACS Server 缓冲区错误漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft, Cyprus. It is used to store, archive, manage, view and burn medical images. A buffer error vulnerability exists in...

7.5CVSS7.6AI score0.01007EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/30 12:00 a.m.7 views

Sante PACS Server 路径遍历漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft Cyprus. It is used to store, archive, manage, view and burn medical images. A path traversal vulnerability exists in...

4.3CVSS4.8AI score0.01603EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/25 3:15 p.m.8 views

CVE-2024-35144

IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system...

5.3CVSS5.9AI score0.00306EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/25 3:15 p.m.29 views

CVE-2024-35144

IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system...

5.3CVSS0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/25 2:24 p.m.13 views

CVE-2024-35144 IBM Maximo Application Suite information disclosure

IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system...

5.3CVSS5.3AI score0.00306EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/25 2:24 p.m.74 views

CVE-2024-35144

The CVE-2024-35144 case affects IBM Maximo Application Suite Monitor Component (versions 8.10, 8.11, 9.0). Description: the Monitor Component stores source code on the web server, creating potential disclosure of sensitive information (CWE-540). Impact is information disclosure that could aid fur...

5.3CVSS5.4AI score0.00306EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/25 12:00 a.m.8 views

IBM Maximo Application Suite 安全漏洞

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. An information disclosure vulnerability exists in IBM Maximo Application Suite that stems from allowing...

5.3CVSS6AI score0.00306EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/24 6:15 p.m.6 views

CVE-2025-24650

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic allows Upload a Web Shell to a Web Server. This issue affects Tourfic: from n/a through 2.15.3...

9.1CVSS7.3AI score0.00638EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/01/23 10:28 a.m.649 views

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

CVE-2024-50379-Exploit This repository provides a Python scri...

9.8CVSS9.5AI score0.44312EPSS
SaveExploits13
GithubExploit
GithubExploit
added 2025/01/23 10:21 a.m.109 views

Exploit for CVE-2025-22785

CVE-2025-22785 Course Booking System = 5.0.12 AND time-based b...

9.3CVSS7.4AI score0.02953EPSS
SaveExploits1
OSV
OSV
added 2025/01/22 10:02 a.m.25 views

RHSA-2025:0342 Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.5 release and security update

Bulletin has no description...

8.1CVSS8.8AI score0.44312EPSS
SaveExploits13References9
Cvelist
Cvelist
added 2025/01/22 9:10 a.m.27 views

CVE-2022-23439

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the Host header points to an arbitrary webserver...

4.7CVSS0.00449EPSS
SaveExploits0References1
Rows per page
Query Builder