Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

christophe de la fuente vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4431
Directory traversal vulnerability in main.php in Merethis Centreon prior to 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
Merethis Centreon 1.4Merethis Centreon 1.4.2.5Merethis Centreon 1.4.2.6Merethis Centreon 1.4.2.7Merethis Centreon 2.0Merethis Centreon 2.1.10Merethis Centreon 2.1.11Merethis Centreon 2.1.7Merethis Centreon 2.1.8Merethis Centreon 2.2Merethis Centreon 2.3.0Merethis Centreon 1.4.2.3Merethis Centreon 1.4.2.4Merethis Centreon 2.1.0Merethis Centreon 2.1.1Merethis Centreon 2.1.4Merethis Centreon 2.1.5Merethis Centreon 2.1.6Merethis Centreon 1.4.1Merethis Centreon 1.4.2Merethis Centreon 2.0.1Merethis Centreon 2.0.2
7.2
CVSSv3
CVE-2020-14144
The git hook feature in Gitea 1.1.0 up to and including 1.12.5 might allow for authenticated remote code execution in customer environments where the documentation was not understood (e.g., one viewpoint is that the dangerousness of this feature should be documented immediately a...
Gitea Gitea
9.8
CVSSv3
CVE-2021-25281
An issue exists in through SaltStack Salt prior to 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.
Saltstack SaltFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
9.8
CVSSv3
CVE-2023-43177
CrushFTP before 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
Crushftp Crushftp
7.2
CVSSv3
CVE-2022-24734
MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type `php` with PHP code, executed on on _Change S...
Mybb Mybb
5.5
CVSSv3
CVE-2020-3434
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local malicious user to cause a denial of service (DoS) condition on an affected device. To exploit this vulnerability, the attacke...
Cisco Anyconnect Secure Mobility Client
7.8
CVSSv3
CVE-2023-21768
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft Windows Server 2022 -Microsoft Windows 11 22h2Microsoft Windows 11 21h2
9.8
CVSSv3
CVE-2022-36446
software/apt-lib.pl in Webmin prior to 1.997 lacks HTML escaping for a UI command.
Webmin Webmin
7.8
CVSSv3
CVE-2020-3433
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local malicious user to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid creden...
Cisco Anyconnect Secure Mobility Client
6.5
CVSSv3
CVE-2020-3153
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local malicious user to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect hand...
Cisco Anyconnect Secure Mobility Client
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook