Lucene search
K

5836 matches found

CNVD
CNVD
added 2020/01/23 12:0 a.m.2 views

WordPress conversation-watson cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress conversation-watson versions prior to 0.8.21. The...

6.1CVSS6.2AI score0.01371EPSS
Exploits1References1
CNVD
CNVD
added 2020/01/23 12:0 a.m.4 views

Facebook WhatsApp Cross-Site Scripting Vulnerability

Facebook WhatsApp is a suite of mobile applications from the American company Facebook that utilize the web to deliver text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, and more. A cross-site scripting...

8.2CVSS6.2AI score0.67859EPSS
Exploits5References1
CNVD
CNVD
added 2020/01/23 12:0 a.m.2 views

Cisco Email Security Appliance Cross-Site Scripting Vulnerability

Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. A cross-site scripting vulnerability exists in the Cisco Email Security Appliance 13.0 and prior versions. The vulnerability stems from a lack of prop...

6.1CVSS6.3AI score0.0084EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.38 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2018-1221)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.08654EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2019-1457)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.08654EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.13 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2018-1223)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.08654EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2018-1324)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.08654EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2019-1157)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.08654EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2018-1333)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.08654EPSS
Exploits0References2
Yubico
Yubico
added 2020/01/22 12:0 a.m.33 views

Security advisory YSA-2020-01 | Yubico

Yubico received a report from LinkedIn Information Security indicating there is insufficient data validation in the open-source project for YubiKey Validation Server git: yubikey-val. Yubico verified the issue and has made a security update available to mitigate this issue and enhance the...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/01/20 12:0 a.m.2 views

MDaemon Email Server Cross-Site Scripting Vulnerability

MDaemon Email Server is an email server. A cross-site scripting vulnerability exists in MDaemon Email Server version 17.5.1. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...

5.4CVSS6.4AI score0.00602EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2020/01/20 12:0 a.m.4 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.3CVSS5.9AI score0.01316EPSS
Exploits0References3
CNVD
CNVD
added 2020/01/19 12:0 a.m.1 views

Eclipse Memory Analyzer Cross-Site Scripting Vulnerability

Eclipse Memory Analyzer is a memory analysis tool from the Eclipse Foundation. A cross-site scripting vulnerability exists in Eclipse Memory Analyzer 1.9.1 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

9CVSS6.5AI score0.01933EPSS
Exploits1References1
CNVD
CNVD
added 2020/01/19 12:0 a.m.2 views

WordPress Ultimate FAQ Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate FAQ is a FAQ plugin used in it. A cross-site scripting vulnerability exists in WordPress Ultimate FAQ versions prior to 1.8.30...

6.1CVSS6.2AI score0.02195EPSS
Exploits1References1
CNVD
CNVD
added 2020/01/19 12:0 a.m.2 views

SolarWinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2020-04012)

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

6.1CVSS6.4AI score0.0186EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/19 12:0 a.m.2 views

SolarWinds Orion Platform Cross-Site Scripting Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

6.1CVSS6.4AI score0.0152EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/16 12:0 a.m.3 views

Pivotal Software Spring Framework Cross-Site Scripting Vulnerability

Pivotal Software Spring Framework is the U.S. Pivotal Software's set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications . A cross-site scripting vulnerability exists in Pivotal Software Spring Framework versions 5.2.x prior to 5.2.3,...

8CVSS8.3AI score0.88077EPSS
Exploits2References1
NVD
NVD
added 2020/01/15 11:15 p.m.10 views

CVE-2019-19859

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...

5.3CVSS5.3AI score0.00805EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/15 12:0 a.m.1 views

Power Quotient International AirCard Cross-Site Scripting Vulnerability

Power Quotient International AirCard is a wireless-enabled memory card from Power Quotient International in Taiwan, China. A cross-site scripting vulnerability exists in Power Quotient International AirCard. The vulnerability stems from a lack of proper validation of client-side data by the web...

5.4CVSS6.4AI score0.00486EPSS
Exploits1References1
CNVD
CNVD
added 2020/01/15 12:0 a.m.2 views

Koala Framework Cross-Site Scripting Vulnerability

Koala Framework is a web application framework. A cross-site scripting vulnerability exists in Koala Framework versions prior to 2011-11-21. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

6.1CVSS6.3AI score0.01EPSS
Exploits1References1
Rows per page
Query Builder