Lucene search
+L

1564 matches found

zdt
zdt
added 2018/01/15 12:00 a.m.82 views

Ruby on Rails gem version 1.2.0 rails_admin XSS Vulnerability

Exploit for ruby platform in category web applications Summary An exploitable XSS vulnerability exists in the add filter functionality of the railsadmin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on th...

4.3CVSS6.3AI score0.01279EPSS
SaveExploits3
CNVD
CNVD
added 2018/01/12 12:00 a.m.55 views

RubyGems 'rails_admin' Cross-Site Scripting Vulnerability

RubyGems railsadmin is a Rails engine that provides a control interface for managing data. A cross-site scripting vulnerability exists in RubyGems 'railsadmin' version 1.2.0, where the program fails to adequately filter user-submitted input. A remote attacker can exploit this vulnerability to...

6.1CVSS6.8AI score0.01279EPSS
SaveExploits3References1
RubySec
RubySec
added 2018/01/10 12:00 a.m.21 views

rails_admin ruby gem XSS vulnerability

An exploitable cross site scripting XSS vulnerability exists in the add filter functionality of the railsadmin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish ...

6.1CVSS4AI score0.01279EPSS
SaveExploits3References1Affected Software1
NVD
NVD
added 2018/01/03 12:29 a.m.25 views

CVE-2017-1000463

Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.3AI score0.01008EPSS
SaveExploits0References1
OSV
OSV
added 2018/01/03 12:29 a.m.22 views

CVE-2017-1000463

Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.6AI score
SaveExploits0References1
CNVD
CNVD
added 2018/01/03 12:00 a.m.13 views

Leafpub Cross-Site Scripting Vulnerability

Leafpub is an open source PHP and MySQL based code publishing tool . A cross-site scripting vulnerability exists in Leafpub version 1.2.0-beta6. A remote attacker can exploit this vulnerability to cause a denial of service and execute JavaScript code...

5.4CVSS6.6AI score0.01008EPSS
SaveExploits0References1
zdt
zdt
added 2017/12/28 12:00 a.m.55 views

Telesquare SKT LTE Router SDT-CS3B1 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc !/usr/bin/env python Telesquare SKT LTE Router SDT-CS3B1 Remote Reboot Denial Of Service Vendor: Telesquare Co., Ltd. Product web page: http://www.telesquare.co.kr Affected version: FwVer: SDT-CS3B1, sw version 1.2.0 LteVer: ML300S5XEA41090 1...

7AI score
SaveExploits0
OSV
OSV
added 2017/11/17 2:29 a.m.21 views

CVE-2017-1000198

tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handlerglfs.so handler resulting in denial of service...

7.5CVSS6.7AI score
SaveExploits0References2
Prion
Prion
added 2017/11/17 2:29 a.m.19 views

Null pointer dereference

tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's onunregisterhandler function resulting in denial of service...

5CVSS7.3AI score0.01347EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2017/11/17 2:00 a.m.35 views

CVE-2017-1000201

The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack...

5.9AI score0.00331EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/11/17 12:00 a.m.12 views

tcmu-runner Information Disclosure Vulnerability

tcmu-runner is a daemon for handling the userspace side of the LIO TCM-User backstore. An information disclosure vulnerability exists in handlerqcow.so in tcmu-runner versions 0.91-1.2.0. An attacker can exploit this vulnerability to inspect any file with root privileges...

7.5CVSS6.4AI score0.01296EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/17 12:00 a.m.9 views

tcmu-runner null pointer backreference vulnerability

tcmu-runner is a daemon for handling user space for LIO TCM user backend storage. A security vulnerability exists in the 'onunregisterhandler' function in tcmu-runner versions 1.0.5 through 1.2.0. An attacker can exploit the vulnerability to cause a denial of service null pointer backreference...

7.5CVSS6.7AI score0.01347EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/17 12:00 a.m.12 views

tcmu-runner invalid memory reference vulnerability

tcmu-runner is a daemon for handling the userspace side of the LIO TCM-User backstore. An invalid memory reference vulnerability exists in the handlerglfs.so handler in tcmu-runner versions 0.9.0-1.2.0. An attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS6.8AI score0.01347EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/17 12:00 a.m.12 views

tcmu-runner denial of service vulnerability

tcmu-runner is a daemon for handling user space for LIO TCM user backend storage. A security vulnerability exists in tcmu-runner versions 1.0.5 through 1.2.0. An attacker can exploit the vulnerability to cause a denial of service...

5.5CVSS6.7AI score0.00331EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/03 12:00 a.m.15 views

bchunk heap buffer overflow vulnerability

bchunk is a format converter capable of converting CD images in bin/cue format to iso format files. A heap buffer overflow vulnerability exists in bchunk versions 1.2.0 and 1.2.1. An attacker can exploit this vulnerability to cause a denial of service crash with malformed CUE .cue files...

5.5CVSS5.5AI score0.0138EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/03 12:00 a.m.11 views

bchunk denial of service vulnerability

bchunk is a format converter capable of converting CD images in bin/cue format to iso format files. A security vulnerability exists in bchunk version 1.2.0 and 1.2.1. An attacker can exploit this vulnerability to cause a denial of service crash with malformed CUE .cue files...

5.5CVSS5.2AI score0.01255EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/03 12:00 a.m.11 views

FFlets Easy Setup Tool Installer Untrusted Search Path Vulnerability

Flets Easy Setup Tool is a Flets easy setup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan.Installer is one of the installation programs. An untrusted search path vulnerability exists in the Installer in Flets Easy Setup Tool 1.2.0 and earlier versions. An attacker can exploit this...

7.8CVSS7.8AI score0.01175EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/03 12:00 a.m.11 views

bchunk heap buffer overflow vulnerability (CNVD-2017-33102)

bchunk is a format converter capable of converting CD images in bin/cue format to iso format files. A heap buffer overflow vulnerability exists in bchunk versions 1.2.0 and 1.2.1. An attacker can exploit this vulnerability to cause a denial of service crash with a malformed CUE .cue file...

5.5CVSS5.5AI score0.0138EPSS
SaveExploits0References1
OSV
OSV
added 2017/10/28 9:29 p.m.10 views

UBUNTU-CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

5.5CVSS6.1AI score0.0138EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/28 9:29 p.m.22 views

UBUNTU-CVE-2017-15953

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

5.5CVSS6.2AI score0.0138EPSS
SaveExploits0References3
Rows per page
Query Builder