NAME__________Tenable Nessus denial of servicePlatforms Affected:Tenable Nessus 10.5.6Risk Level:6.8Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Tenable Nessus is vulnerable to a denial of service,...
NAME__________openSIS Community Edition cross-site request forgeryPlatforms Affected:OS4Ed openSIS Community Edition 9.0Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________openSIS Community Edition is vulnerable to cross-site...
NAME__________openSIS Community Edition information disclosurePlatforms Affected:OS4Ed openSIS Community Edition 9.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________openSIS Community Edition could allow a remote attacker...
NAME__________localstack man-in-the-middlePlatforms Affected:localstack localstack 2.3.2Risk Level:5.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________localstack is vulnerable to a man-in-the-middle attack, caused by missing SSL certificate validation....
NAME__________OpenCRX HTML injectionPlatforms Affected:OpenCRX OpenCRX 5.2.0Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________OpenCRX is vulnerable to HTML injection. A remote attacker could inject malicious...
NAME__________TerraMaster directory traversalPlatforms Affected:TerraMaster TerraMaster 2.295Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________TerraMaster could allow a remote attacker to traverse directories on the system....
NAME__________PyPinkSign information disclosurePlatforms Affected:PyPinkSign PyPinkSign 0.5.1Risk Level:10Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________PyPinkSign could allow a remote attacker to obtain sensitive information, caused by...
NAME__________Node.js json-web-token module security bypassPlatforms Affected:Node.js json-web-token 3.0.1Risk Level:7.5Exploitability:Proof of ConceptConsequences:Bypass Security DESCRIPTION__________Node.js json-web-token module could allow a remote attacker...
NAME__________Audio Merchant Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Audio Merchant Plugin for WordPress 5.0.4Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Audio Merchant Plugin...
NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...
NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...
NAME__________LibreNMS cross-site scriptingPlatforms Affected:LibreNMS LibreNMS 23.10.0Risk Level:6.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________LibreNMS is vulnerable to cross-site scripting, caused by improper validation of user-supplied...
NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...
NAME__________Tooltips Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress WordPress Tooltips Plugin for WordPress 8.2.5Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Tooltips Plugin for WordPress...
NAME__________LibreNMS information disclosurePlatforms Affected:LibreNMS LibreNMS 23.10.0Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________LibreNMS could allow a remote authenticated attacker to obtain sensitive information, caused...
NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...
NAME__________OpenCRX HTML injectionPlatforms Affected:OpenCRX OpenCRX 5.2.0Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________OpenCRX is vulnerable to HTML injection. A remote attacker could inject malicious...
NAME__________Post Meta Data Manager Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Post Meta Data Manager Plugin for WordPress 1.2.1Risk Level:4.3Exploitability:UnprovenConsequences:Gain...
NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe file uploadPlatforms Affected:NEC CLUSTERPRO X...
NAME__________Strapi Community Strapi Protected Populate Plugin information disclosurePlatforms Affected:Strapi Community Strapi Protected Populate Plugin 1.3.3Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Strapi Community Strapi...
NAME__________BookStackApp BookStack server-side request forgeryPlatforms Affected:BookStackApp BookStack 23.10.2Risk Level:7.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________BookStackApp BookStack is vulnerable to server-side request forgery, caused by...
NAME__________IBM Sterling B2B Integrator cross-site request forgeryPlatforms Affected:IBM Sterling B2B Integrator 6.0.0.0 IBM Sterling B2B Integrator 6.1.0.0 IBM Sterling B2B...
NAME__________Wire wire-avs denial of servicePlatforms Affected:Wire wire-avs 9.2.21 Wire wire-avs 9.3.4Risk Level:7.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Wire wire-avs is vulnerable to a...
NAME__________NC3 - Luxembourg Testing Platform denial of servicePlatforms Affected:NC3 - Luxembourg Testing Platform 2.1.1Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________NC3 - Luxembourg...
