Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

12608 matches found

Openbugbounty
Openbugbounty•added 2018/04/10 11:51 a.m.•12 views

rdbatteries.com XSS vulnerability

Open Bug Bounty ID: OBB-600049 Description| Value ---|--- Affected Website:| rdbatteries.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty•added 2018/04/08 11:00 a.m.•17 views

site.sourceoflight.net XSS vulnerability

Open Bug Bounty ID: OBB-599021 Description| Value ---|--- Affected Website:| site.sourceoflight.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Debian
Debian•added 2018/04/03 4:02 p.m.•107 views

[SECURITY] [DSA 4164-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4164-1 [email protected] https://www.debian.org/security/ Stefan Fritsch April 03, 2018 https://www.debian.org/security/faq -...

6.8CVSS6.7AI score0.85452EPSS
SaveExploits0
Openbugbounty
Openbugbounty•added 2018/04/02 2:07 p.m.•17 views

komponisten.at XSS vulnerability

Open Bug Bounty ID: OBB-595693 Description| Value ---|--- Affected Website:| komponisten.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2018/03/30 12:00 a.m.•70 views

openSUSE Security Update : tomcat (openSUSE-2018-325)

This update for tomcat fixes the following issues : Security issues fixed : - CVE-2018-1305: Fixed late application of security constraints that can lead to resource exposure for unauthorised users bsc1082481. - CVE-2018-1304: Fixed incorrect handling of empty string URL in security constraints...

6.5CVSS6.3AI score0.1707EPSS
SaveExploits2References6
Openbugbounty
Openbugbounty•added 2018/03/29 2:23 a.m.•15 views

hotovenpizza.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-593328 Description| Value ---|--- Affected Website:| hotovenpizza.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2018/03/27 12:00 a.m.•81 views

FreeBSD : apache -- multiple vulnerabilities (f38187e7-2f6e-11e8-8f07-b499baebfeaf)

The Apache httpd reports : Out of bound write in modauthnzldap with AuthLDAPCharsetConfig enabled CVE-2017-15710 modsession: CGI-like applications that intend to read from modsession's 'SessionEnv ON' could be fooled into reading user-supplied data instead. CVE-2018-1283 modcachesocache: Fix...

9.8CVSS6.6AI score0.85452EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus•added 2018/03/27 12:00 a.m.•58 views

Amazon Linux AMI : tomcat80 (ALAS-2018-973)

Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration : As part of the fix for bug 61201, the documentation for Apache Tomcat included an updated description of the search algorithm used by the CGI Servlet to identify which script to execute. The update was not...

6.5CVSS6.4AI score0.1707EPSS
SaveExploits2References4
CNVD
CNVD•added 2018/03/27 12:00 a.m.•67 views

Dell EMC iDRAC7 and iDRAC8 Code Execution Vulnerabilities

Dell EMC iDRAC7 and iDRAC8 are both hardware and software-inclusive system management solutions from Dell USA. The solutions provide remote management, crash system recovery and power control for Dell PowerEdge systems. A security vulnerability exists in Dell EMC iDRAC7 and iDRAC8. A remote...

9.8CVSS7.4AI score0.90091EPSS
SaveExploits4References1
Openbugbounty
Openbugbounty•added 2018/03/26 6:37 p.m.•10 views

cyano.genome.jp XSS vulnerability

Open Bug Bounty ID: OBB-592120 Description| Value ---|--- Affected Website:| cyano.genome.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
NVD
NVD•added 2018/03/26 3:29 p.m.•26 views

CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

5.3CVSS5.8AI score0.09737EPSS
SaveExploits0References26
Prion
Prion•added 2018/03/26 3:29 p.m.•49 views

Design/Logic Flaw

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

3.5CVSS6.9AI score0.09737EPSS
SaveExploits0References26Affected Software4
osv_alpine
osv_alpine•added 2018/03/26 3:29 p.m.•16 views

ALPINE-CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

5.3CVSS6.9AI score0.09737EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2018/03/26 3:29 p.m.•14 views

DEBIAN-CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

5.3CVSS6.9AI score0.09737EPSS
SaveExploits0References1
CVE
CVE•added 2018/03/26 3:00 p.m.•3658 views

CVE-2018-1283

In Apache httpd (mod_session) versions 2.4.0–2.4.29, when SessionEnv forwarding is enabled to CGI applications, a remote attacker can influence their content by sending a crafted Session header. This arises from mod_session forwarding data using the HTTP_SESSION variable name, which overlaps with...

5.3CVSS7AI score0.09737EPSS
SaveExploits0References26Affected Software1
Mend
Mend•added 2018/03/26 3:00 p.m.•6 views

CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

6CVSS0.09737EPSS
SaveExploits0References27
Debian CVE
Debian CVE•added 2018/03/26 3:00 p.m.•59 views

CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

5.3CVSS6.7AI score0.09737EPSS
SaveExploits0
Cvelist
Cvelist•added 2018/03/26 3:00 p.m.•124 views

CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

7.1AI score0.09737EPSS
SaveExploits0References26
AlpineLinux
AlpineLinux•added 2018/03/26 3:00 p.m.•39 views

CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

5.3CVSS7.4AI score0.09737EPSS
SaveExploits0
UbuntuCve
UbuntuCve•added 2018/03/26 12:00 a.m.•57 views

CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

5.3CVSS6.8AI score0.09737EPSS
SaveExploits0References5
Rows per page
Query Builder