Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
11 results
Aug 11, 2021In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC.CVE-2020-25566 · Network & remote access · Sapphireims · reported by MITRECritical 9.8
In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC. Notice that we do not require a JSESSIONID in this request and can reset any user’s password by changing the username to that user and password to base64(desired password).
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal.CVE-2020-25565 · Network & remote access · Sapphireims · reported by MITRECritical 9.8
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSavCVE-2020-25564 · Network & remote access · Sapphireims · reported by MITREHigh 8.8
In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (AutomCVE-2020-25563 · Network & remote access · Sapphireims · reported by MITRECritical 9.8
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature and not having a JSESSIONID.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 5.0, there is no CSRF token present in the entire application.CVE-2020-25562 · Network & remote access · Sapphireims · reported by MITREMedium 6.5
In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server.CVE-2020-25561 · Network & remote access · Sapphireims · reported by MITREHigh 7.8
SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in ServerConf.config file in the client.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal.CVE-2020-25560 · Network & remote access · Sapphireims · reported by MITRECritical 9.8
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server. We also observed the same is true if the JSESSIONID is completely removed.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 4097_1, the password in the database is stored in Base64 format.CVE-2017-16632 · Network & remote access · Sapphireims · reported by MITREHigh 7.5
In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "AccCVE-2017-16631 · Network & remote access · Sapphireims · reported by MITREMedium 6.5
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object CVE-2017-16630 · Network & remote access · Sapphireims · reported by MITREHigh 8.8
In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function.
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Aug 11, 2021In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login fCVE-2017-16629 · Network & remote access · Sapphireims · reported by MITREHigh 7.5
In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For "Correct User and Incorrect Password" - it gives an error "Authentication failed. Please login again."
- Product
- Sapphireims
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordvuln.shellcoder.partyvuln.shellcoder.party
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.