ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

6 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: thycotic ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2021-41845
A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007.

A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 through 11.0.000006.

NVD description · AI analysis pending		6.5<1%
  • thycotic secret server
—
CVE-2021-34679
Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

NVD description · AI analysis pending		7.51%
  • thycotic password reset server
—
CVE-2019-18355
+2 in the same advisory: …18356 …18357
An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.

NVD description · AI analysis pending		9.8
group max
2%
  • thycotic secret server
—
CVE-2017-11725
The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections.

The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections.

NVD description · AI analysis pending		5.4<1%
  • thycotic secret server
—