吉祥寺北口システムが気になった記事をクリップしています。タイトルから元記事にリンクしています。タグは記事タイトルを形態素分析しています。たまにコメントをつけています。

Unauthenticated

• [ZBX-25635] Unauthenticated Zabbix frontend takeover when SSO is being used (CVE-2024-36466) – ZABBIX SUPPORT
  • 2024(1473)
  • 25635(1)
  • 36466(1)
  • Being(20)
  • CVE-(1427)
  • frontend(7)
  • is(1010)
  • SSO(35)
  • Support(652)
  • Takeover(15)
  • Unauthenticated(13)
  • Used(59)
  • when(84)
  • Zabbix(68)
  • ZBX(22)
• Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024
  • 2024(1473)
  • Code(400)
  • execution(116)
  • in(2447)
  • July(51)
  • OpenSSH-(49)
  • regreSSHion(1)
  • Remote(203)
  • Server(698)
  • Unauthenticated(13)
  • Vulnerability(515)
• Technical Advisory: F5 BIG-IP Unauthenticated RCE Vulnerability, CVE-2023-46747 –
  • 2023(1931)
  • 46747(4)
  • Advisory(250)
  • Big(101)
  • CVE-(1427)
  • IP(348)
  • RCE(30)
  • Technical(53)
  • Unauthenticated(13)
  • Vulnerability(515)
• BIG-IP Configuration utility unauthenticated remote code execution vulnerability CVE-2023-46747
  • 2023(1931)
  • 46747(4)
  • Big(101)
  • Code(400)
  • configuration(20)
  • CVE-(1427)
  • execution(116)
  • IP(348)
  • Remote(203)
  • Unauthenticated(13)
  • Utility(8)
  • Vulnerability(515)
• Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability
  • Access(296)
  • API(1104)
  • Cisco(204)
  • REST(31)
  • SD(64)
  • Unauthenticated(13)
  • vManage(2)
  • Vulnerability(515)
  • WAN(36)
• Unauthenticated Command Injection ? Advisory ? Cacti/cacti ? GitHub
  • Advisory(250)
  • Cacti(2)
  • Command(76)
  • GitHub(873)
  • Injection(59)
  • Unauthenticated(13)
• Unauthenticated Remote Code Execution in Spotify’s Backstage
  • backstage(5)
  • Code(400)
  • execution(116)
  • in(2447)
  • Remote(203)
  • Spotify's(6)
  • Unauthenticated(13)
• tagDiv Composer < 3.5 - Unauthenticated Account Takeover WordPress Security Vulnerability
  • 3.5(21)
  • Account(81)
  • Composer(12)
  • Security(5710)
  • tagDiv(2)
  • Takeover(15)
  • Unauthenticated(13)
  • Vulnerability(515)
  • WordPress(449)
• iControl REST unauthenticated remote command execution vulnerability CVE-2021-22986
  • 2021(2113)
  • 22986(2)
  • Command(76)
  • CVE-(1427)
  • execution(116)
  • iControl(1)
  • Remote(203)
  • REST(31)
  • Unauthenticated(13)
  • Vulnerability(515)
• oss-sec: CVE-2019-10222: ceph: unauthenticated clients can crash RGW
  • 10222(1)
  • 2019(1756)
  • can(241)
  • Ceph(11)
  • Clients(4)
  • Crash(19)
  • CVE-(1427)
  • oss-sec(64)
  • RGW(1)
  • Unauthenticated(13)
• Moodle.org: MSA-18-0005: Unauthenticated users can trigger custom messages to admin via paypal enrol script
  • 0005(1)
  • 18(403)
  • Admin(30)
  • can(241)
  • custom(64)
  • enrol(1)
  • Messages(28)
  • Moodle(29)
  • MSA-(21)
  • org(402)
  • PayPal(72)
  • Script(12)
  • to(3295)
  • trigger(9)
  • Unauthenticated(13)
  • Users(195)
  • via(72)
• Cisco Prime Network Analysis Module Unauthenticated Remote Code Execution Vulnerability
  • Analysis(76)
  • Cisco(204)
  • Code(400)
  • execution(116)
  • Module(28)
  • Network(399)
  • Prime(85)
  • Remote(203)
  • Unauthenticated(13)
  • Vulnerability(515)
• oss-sec: proftpd: Unauthenticated copying of files via SITE CPFR/CPTO allowed by mod_copy
  • allowed(2)
  • by(1069)
  • copy(18)
  • copying(1)
  • CPFR(1)
  • CPTO(1)
  • files(67)
  • mod(34)
  • of(3341)
  • oss-sec(64)
  • proftpd(7)
  • site(432)
  • Unauthenticated(13)
  • via(72)