Lucene search
K

14 matches found

Circl
Circl
added 2025/08/17 9:2 p.m.4 views

CVE-2018-1000129

creationtimestamp| type| source ---|---|--- 2025-08-17 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwmrsakv3t2w...

6.1CVSS7.3AI score0.76775EPSS
Exploits1References1
Hacker One
Hacker One
added 2024/10/12 5:41 a.m.24 views

U.S. Dept Of Defense: [ CVE-2018-1000129 ] RXSS At `https://███████` via the URI

The CVE-2018-1000129 vulnerability allowed remote cross-site scripting RXSS at the specified URL. The vulnerability was due to improper sanitization of user input, which enabled the execution of arbitrary scripts in the victim's browser...

6.1CVSS6.3AI score0.76775EPSS
Exploits1
Hacker One
Hacker One
added 2022/09/27 5:29 p.m.96 views

Mars: Jolokia Reflected XSS

Summary: salam Hi team i hope you are well , after doing some recon on mars.com i saw that the website use jolkia 1.3.5 it's vulnerable to reflected XSS Steps To Reproduce: 1. Vuln Link : https://couponsmanager-uat.b2b.mars.com/jolokia/read%3Csvg%20onload=alertdocument.cookie%3E?mimeType=text/htm...

4.3CVSS1.8AI score0.76775EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2022/05/14 1:27 a.m.0 views

cn.home1:spring-cloud-eureka-server (>=0.0.1 <=1.0.1.U1), com.github.springcloud:moss-client-1.x (=1.0.1.RELEASE) +162 more potentially affected by CVE-2018-1000129 via org.jolokia:jolokia-core (>=1.3.7 <=1.4.0)

org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =0.1.5, =0.1.5, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000129 Source advisory: OSV:GHSA-HFPG-GQJW-779M...

6.1CVSS6.6AI score0.76775EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2018/12/11 2:12 p.m.109 views

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R10 security and bug fix update

An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.1CVSS6.7AI score0.76775EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2018/09/11 7:53 a.m.129 views

Important: Red Hat Security Advisory: Fuse 7.1 security update

An update is now available for Red Hat Fuse. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

9.8CVSS7.7AI score0.92332EPSS
Exploits7References27
seebug.org
seebug.org
added 2018/04/19 12:0 a.m.951 views

Jolokia Vulnerabilities - RCE & XSS(CVE-2018-1000130,CVE-2018-1000129)

Recently, during a client engagement, Gotham Digital Science found a couple of zero-day vulnerabilities in the Jolokia service. Jolokia is an open source product that provides an HTTP API interface for JMX Java Management Extensions technology. It contains an API we can use for calling MBeans...

6.8CVSS1.2AI score0.91099EPSS
Exploits1
OSV
OSV
added 2018/03/14 1:29 p.m.27 views

CVE-2018-1000129

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser...

6.1CVSS6.2AI score
Exploits0References4
NVD
NVD
added 2018/03/14 1:29 p.m.25 views

CVE-2018-1000129

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser...

6.1CVSS6.1AI score0.76775EPSS
Exploits1References4
Cvelist
Cvelist
added 2018/03/14 1:0 p.m.25 views

CVE-2018-1000129

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser...

6AI score0.76775EPSS
Exploits1References4
CVE
CVE
added 2018/03/14 1:0 p.m.139 views

CVE-2018-1000129

CVE-2018-1000129 affects Jolokia 1.3.7, where the HTTP servlet is vulnerable to cross-site scripting (XSS). An attacker can cause the browser to execute arbitrary JavaScript, potentially hijacking sessions or accessing sensitive data. The issue is documented across multiple sources (NVD and secur...

6.1CVSS5.8AI score0.76775EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2017/11/17 5:0 a.m.45 views

CVE-2017-1000129

CVE-2017-1000129 affects Serendipity 2.0.3, where a SQL injection in the blog component can lead to information disclosure. The vulnerability is due to unsafely constructed SQL queries in the blog module, enabling an attacker to retrieve data. Public references indicate a patch/release to address...

7.5CVSS7.5AI score0.00315EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2016/10/10 8:59 p.m.9 views

CVE-2016-1000129

Reflected XSS in wordpress plugin defa-online-image-protector v3.3...

6.1CVSS6AI score0.02773EPSS
Exploits2References3
CVE
CVE
added 2016/10/10 8:0 p.m.70 views

CVE-2016-1000129

Summary: CVE-2016-1000129 is a reflected cross-site scripting (XSS) vulnerability in the WordPress plugin “defa-online-image-protector”

6.1CVSS5.9AI score0.02773EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder