CAGE Web Design | Rolf Van Gelder Security Vulnerabilities

Open Web Analytics Detection

The remote web server is hosting Open Web Analytics, a web application framework for tracking and analyzing website and web application...

Amazon Web Services Settings

This script initializes the credentials used for Amazon Web Services checks done via the...

McAfee Web Gateway Detection

The remote host is a McAfee Web Gateway (MWG) Appliance. MWG acts as a proxy server and provides web filtering and monitoring...

CVE-2021-40442

Microsoft Excel Remote Code Execution...

Junos J-Web Detection

Junos J-Web, a web application for sending and receiving SMS, was detected on the remote...

CockroachDB Web Console Detection

Detects the web console for CockroachDB on the remote...

High severity vulnerability that affects io.vertx:vertx-web

In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired...

SolarWinds Web Performance Monitor (WPM) Detection (HTTP)

HTTP based detection of SolarWinds Web Performance Monitor ...

OpenWrt Web UI Detection.

OpenWrt web user interface detected on remote...

Buffalo TeraStation Web detection

Buffalo TeraStation, a network attached storage (NAS), was detected based on the web...

pfSense Web Interface Detection

The web interface for pfSense was detected on the remote host. pfSense is an open source firewall based on...

Belkin Web Interface Detection

Nessus was able to detect the web administration interface for a Belkin device on the remote...

Barracuda Web Filter Detection

The remote host appears to be a Barracuda Web Filter device, used to control access to websites and applications by end...

ClearSCADA Web Server Detection

The remote host is running the ClearSCADA web server, part of a software platform for managing and monitoring remote SCADA...

CVE-2021-40486

Microsoft Word Remote Code Execution...

Apache ActiveMQ's default configuration doesn't secure the API web context

In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (where the Jolokia JMX REST API and the Message REST API are located). It means that anyone can use these layers without any required authentication. Potentially, anyone can interact with the broker (using Jolokia....

CVE-2023-23399

Microsoft Excel Remote Code Execution...

Apache ActiveMQ's default configuration doesn't secure the API web context

In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (where the Jolokia JMX REST API and the Message REST API are located). It means that anyone can use these layers without any required authentication. Potentially, anyone can interact with the broker (using Jolokia....

CVE-2022-26901

Microsoft Excel Remote Code Execution...

Reportico affected by Incorrect Access Control

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the...

Progress Telerik Report Server Web Interface Detection

The web interface for Progress Telerik Report Server was detected on the remote...

CVE-2024-33953 WordPress Adventure Journal theme <= 1.7.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt van Andel Adventure Journal allows Stored XSS.This issue affects Adventure Journal: from n/a through...

(RHSA-2024:2731) Moderate: Red Hat OpenStack Platform 17.1 (python-django) security update

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle. Security Fix(es): denial-of-service in intcomma template filter (CVE-2024-24680) ...

CVE-2024-33953

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt van Andel Adventure Journal allows Stored XSS.This issue affects Adventure Journal: from n/a through...

CVE-2023-21716

Microsoft Word Remote Code Execution...

Amazon Web Services EC2 Instance Metadata Enumeration (Windows)

The remote host appears to be an Amazon Machine Image. Nessus will attempt to use the metadata API to collect information about the...

web-corpora.net Cross Site Scripting vulnerability OBB-3882566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2022-41103

Microsoft Word Information Disclosure...

CVE-2022-41060

Microsoft Word Information Disclosure...

Apache Kylin Web UI Detection

The web user interface for Apache Kylin was detected on the remote...

Tableau Server Web UI Detection

The web user interface for Tableau Server was detected on the remote...

Netwrix Auditor Web API Detection

Netwrix Auditor, an auditing and optimization solution used for compliance operations was detected on the remote host via the Netwrix Integrator API. Note: HTTP basic authentication credentials are required by the API for reliable detection. Alternatively, when the paranoid setting is enabled the.....

ThoughtWorks GoCD Web interface detection

ThoughtWorks GoCD, a CI / CD server, was detected based on the web...

Draytek VigorConnect Web UI Detection

The web application running on the remote web server is Draytek VigorConnect. Draytek VigorConnect is a network management web application for DrayTek...

CODESYS V2 Web Server Detection

The CODESYS V2 web server is running on the remote...

Apache Flink Web UI Detection

Apache Flink web user interface detected on remote host. Apache Flink is an open-source, unified stream-processing and batch-processing framework developed by the Apache Software...

Cisco Aironet Web UI Detection.

Cisco Aironet web user interface detected on remote host. Note that HTTP credentials are required to retrieve the...

Apache Pluto Web Interface Detection

The web interface for Apache Pluto was detected on the remote host. Apache Pluto is a portlet specification reference implementation and technology compliance...

Embedded HP Web Server Detected

The remote host has been identified as using an HP embedded web...

Nokia VitalQIP Web Client Detection

The remote host is running an instance of VitalQIP, an DNS, DHCP, and IP address (DDI) management system. VitalQIP was originally created by Alcatel-Lucent but acquired by...

Grandstream Phone Web Interface Detection

Nessus was able to detect the web interface for a Grandstream phone on the remote...

Zimbra Collaboration Server Web Detection

The web interface for Zimbra Collaboration Server, an open source messaging and collaboration solution, was detected on the remote host. Note the plugin attempts to retrieve the version information without credentials. However, if HTTP Basic credentials are supplied then an attempt to retrieve the....

Dell KACE K1000 Web Detection

The web interface for a Dell KACE K1000 appliance was detected on the remote host. The K1000 is used to manage multiple systems via the...

Web Site Hosting Malicious Binaries

The MD5 sum of one or more binaries hosted on the remote web server matches known malware. This may indicate that the remote site was compromised. Note that Nessus has only scanned files with the following extensions : exe , dll , scr , drv , sys , bat , cmd , com , cpl , csh , gadget ,...

CVE-2024-34790

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hans van Eijsden,niwreg ImageMagick Sharpen Resized Images allows Stored XSS.This issue affects ImageMagick Sharpen Resized Images: from n/a through...

CVE-2024-34790 WordPress Download ImageMagick Sharpen Resized Images plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hans van Eijsden,niwreg ImageMagick Sharpen Resized Images allows Stored XSS.This issue affects ImageMagick Sharpen Resized Images: from n/a through...

SAP Solution Manager Web Detection

The web interface for SAP Solution Manager was detected on the remote host. SAP Solution Manager is application lifecycle management software. Note: This plugin does not report anything. Instead, it collects information stored in host tags for the future development of this...

Tenable Core Web Interface Detection

A Tenable Core Web Interface was detected on the remote...

Cisco HyperFlex Web API Detection

The web API for Cisco HyperFlex was detected on the remote...

Cisco Energy Management Web Detection

Cisco Energy Management, a power management solution for IT assets, was detected based on the web...