Lucene search
+L

4182 matches found

Cvelist
Cvelist
•added 2022/08/25 11:02 p.m.•43 views

CVE-2022-36121

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...

5.4AI score0.00784EPSS
SaveExploits0References3
CVE
CVE
•added 2022/08/25 11:02 p.m.•97 views

CVE-2022-36121

Blue Prism Enterprise 6.0–7.01 is affected by a vulnerability that exists when the Blue Prism Application server is misconfigured, allowing an authenticated user to reverse engineer the software and bypass access controls on the UpdateOfflineHelpData function. This enables changing the offline he...

5.3CVSS5.1AI score0.00784EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•33 views

PT-2022-23209 · Blue Prism · Blue Prism Enterprise

Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: An issue was discovered in a misconfigured environment that exposes the Blue Prism Application server, allowing an authenticated user to reverse engineer the Blue Prism software and...

5.3CVSS5AI score0.00784EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•10 views

CVE-2022-36121: Undefined Security Weakness

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...

5.3CVSS6AI score0.00784EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•20 views

Blue Prism Enterprise 安全漏洞

Blue Prism Enterprise is an intelligent robotic process automation RPA software from Blue Prism UK. A security vulnerability exists in Blue Prism Enterprise versions 6.0 through 7.01 that originates in a misconfigured environment that exposes the Blue Prism application server, which allows an...

5.3CVSS5.5AI score0.00784EPSS
SaveExploits0References5
Veracode
Veracode
•added 2022/08/20 9:46 a.m.•35 views

Cross-site Scripting (XSS)

jenkins is vulnerable to cross-site scripting. The vulnerability exists because the help icon does not escape the feature name that is part of its tooltip which allows an attacker to inject and execute arbitrary javascript...

5.4CVSS6.7AI score0.01527EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
•added 2022/08/11 6:08 a.m.•57 views

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates. The highlights for Kali’s 2022.3’s release: Discord Server - Kali’s new community real-time chat option has launched! Test Lab Environment - Quickly create a test bed to learn, practice, and...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/08/09 12:00 a.m.•24 views

WordPress plugin JS Help Desk 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin JS...

5.4CVSS5.5AI score0.00453EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/03 12:00 a.m.•18 views

WordPress Plugin JS Help Desk SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.6CVSS5.7AI score0.00443EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/02 12:00 a.m.•20 views

WordPress plugin JS Help Desk 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin...

9.1CVSS5.3AI score0.00732EPSS
SaveExploits0References1
Veracode
Veracode
•added 2022/07/26 5:54 a.m.•39 views

Command Injection

npm-help is vulnerable to command injection. The vulnerability exists in the export.latestVersion function in index.js which allows an attacker to inject and execute malicious commands...

9.8CVSS9.4AI score0.0153EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2022/07/25 2:15 p.m.•24 views

CVE-2020-28445

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...

9.8CVSS0.0153EPSS
SaveExploits1References2
Prion
Prion
•added 2022/07/25 2:15 p.m.•19 views

Design/Logic Flaw

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...

7.5CVSS9.5AI score0.0153EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/07/25 2:10 p.m.•42 views

CVE-2020-28445 Command Injection

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...

9.8CVSS9.7AI score0.0153EPSS
SaveExploits1References2
Mend
Mend
•added 2022/07/25 2:10 p.m.•2 views

CVE-2020-28445

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...

9.8CVSS0.0153EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/25 2:10 p.m.•60 views

CVE-2020-28445

CVE-2020-28445 affects the npm-help package. The vulnerability is in the function export.latestVersion() in index.js (line 13), enabling command injection . Multiple sources describe a global impact across all versions and highlight that an attacker can inject and execute commands (as shown in th...

9.8CVSS9.7AI score0.0153EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/25 12:00 a.m.•8 views

CVE-2020-28445: Improper Neutralization of Special Elements used in a Command

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...

9.8CVSS8.2AI score0.0153EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/25 12:00 a.m.•13 views

PT-2022-8897 · Npm · Npm-Help

Name of the Vulnerable Software and Affected Versions: npm-help affected versions not specified Description: The issue affects the npm-help package, with the injection point located in line 13 of the index.js file, specifically in the export.latestVersion function. Recommendations: At the moment,...

9.8CVSS9.6AI score0.0153EPSS
SaveExploits1References5
osv_oesa
osv_oesa
•added 2022/07/22 11:05 a.m.•13 views

OESA-2022-1759 eclipse security update

The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between. Security Fixes: In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to...

7.8CVSS6.9AI score0.00336EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/07/15 8:15 a.m.•11 views

CVE-2022-29890

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link...

6.1CVSS6.3AI score0.00467EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder