Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hackers center security vulnerabilities and exploits

(subscribe to this query)
8.1
CVSSv3
CVE-2018-11776
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or...
Apache Struts
10
CVSSv3
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x prior to 2.3.32 and 2.5.x prior to 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote malicious users to execute arbitrary commands via a crafted Content-Typ...
Apache Struts 2.3.5Apache Struts 2.3.28Apache Struts 2.3.20.2Apache Struts 2.3.15Apache Struts 2.3.25Apache Struts 2.3.14Apache Struts 2.3.13Apache Struts 2.3.16Apache Struts 2.3.24.2Apache Struts 2.3.17Apache Struts 2.3.24.1Apache Struts 2.3.22Apache Struts 2.3.9Apache Struts 2.3.16.3Apache Struts 2.3.23Apache Struts 2.3.6Apache Struts 2.3.24.3Apache Struts 2.3.15.2Apache Struts 2.3.29Apache Struts 2.3.14.3Apache Struts 2.3.19Apache Struts 2.3.20.1
8.1
CVSSv3
CVE-2017-9805
The REST Plugin in Apache Struts 2.1.1 up to and including 2.3.x prior to 2.3.34 and 2.5.x prior to 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.
Apache Struts 2.1.8Apache Struts 2.1.8.1Apache Struts 2.3.1.2Apache Struts 2.3.3Apache Struts 2.3.14.2Apache Struts 2.3.14.3Apache Struts 2.3.16.2Apache Struts 2.3.16.3Apache Struts 2.3.28Apache Struts 2.3.28.1Apache Struts 2.5.3Apache Struts 2.5.4Apache Struts 2.5.10.1Apache Struts 2.5.11Apache Struts 2.1.2Apache Struts 2.2.1Apache Struts 2.2.1.1Apache Struts 2.3.4Apache Struts 2.3.4.1Apache Struts 2.3.15Apache Struts 2.3.15.1Apache Struts 2.3.20
6.5
CVSSv3
CVE-2020-11652
An issue exists in SaltStack Salt prior to 2019.2.4 and 3000 prior to 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
Saltstack SaltOpensuse Leap 15.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Blackberry Workspaces Server 9.1.0Blackberry Workspaces ServerVmware Application Remote Collector 8.0.0Vmware Application Remote Collector 7.5.0
9.8
CVSSv3
CVE-2017-3881
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Manag...
Cisco IosCisco Ios Xe
9.8
CVSSv3
CVE-2020-11651
An issue exists in SaltStack Salt prior to 2019.2.4 and 3000 prior to 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user toke...
Saltstack SaltOpensuse Leap 15.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Vmware Application Remote Collector 8.0.0Vmware Application Remote Collector 7.5.0
7.5
CVSSv3
CVE-2014-0160
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 prior to 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote malicious users to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrat...
Openssl OpensslFilezilla-project Filezilla ServerSiemens Application Processing Engine Firmware 2.0Siemens Cp 1543-1 Firmware 1.1Siemens Simatic S7-1500 Firmware 1.5Siemens Simatic S7-1500t Firmware 1.5Siemens Elan-8.2Siemens Wincc Open Architecture 3.12Intellian V100 Firmware 1.20Intellian V100 Firmware 1.21Intellian V100 Firmware 1.24Intellian V60 Firmware 1.15Intellian V60 Firmware 1.25Mitel Micollab 6.0Mitel Micollab 7.0Mitel Micollab 7.1Mitel Micollab 7.2Mitel Micollab 7.3.0.104Mitel Micollab 7.3Mitel Mivoice 1.1.3.3Mitel Mivoice 1.2.0.11Mitel Mivoice 1.3.2.2
NA
CVE-2007-0056
Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote malicious users to inject arbitrary web script or HTML via the (1) cat parameter to (a) ashop/catalogue.php and (b) ashop/basket.php, the (2) exp parameter to ashop...
Ashopsoftware Ashop Administration PanelAshopsoftware Ashop Deluxe 4.5
NA
CVE-2006-6640
Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote malicious users to inject arbitrary web script or HTML via the (1) ss parameter in (a) search.asp and the (2) company and (3) username fields on (b) the web login page. NOTE: some details we...
Omniture Sitecatalyst 0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-34377CVE-2024-20859CVE-2023-49606injectarbitrary CVE-2024-33788CVE-2024-30973IDORCVE-2024-33907
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook