Lucene search
+L

33 matches found

Circl
Circl
added 2018/10/05 12:20 p.m.12 views

CVE-2014-10075

creationtimestamp| type| source ---|---|--- 2018-10-05 12:20:13+00:00| seen| https://t.me/cibsecurity/539...

9.8CVSS8.7AI score0.03537EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/10/05 5:00 a.m.27 views

CVE-2014-10075

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

10AI score0.03537EPSS
SaveExploits1References2
CVE
CVE
added 2018/10/05 5:00 a.m.51 views

CVE-2014-10075

CVE-2014-10075 affects the Ruby karo gem (v2.3.8) and enables Remote command injection via the host field. The flaw resides in db.rb where metacharacters are mishandled, allowing an attacker to execute arbitrary commands (examples show building and executing a shell command with unsanitized input...

9.8CVSS9.8AI score0.03537EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2018/07/02 4:29 p.m.10 views

CVE-2018-10075

Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...

6.1CVSS5.9AI score0.01275EPSS
SaveExploits0References1
NVD
NVD
added 2018/07/02 4:29 p.m.20 views

CVE-2018-10075

Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...

6.1CVSS6.1AI score0.01275EPSS
SaveExploits0References1
CVE
CVE
added 2018/07/02 4:00 p.m.54 views

CVE-2018-10075

Zoho ManageEngine EventLog Analyzer 11.12 is affected by an XSS vulnerability that can be exploited remotely via the import logs feature. The issue allows an attacker to inject arbitrary web script or HTML when processing logs. Connected sources (NVD, CNVD, PRION, CVELIST) confirm the product/ver...

6.1CVSS6AI score0.01275EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/08/08 3:00 p.m.31 views

CVE-2017-10075

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.9AI score0.17558EPSS
SaveExploits1References3
CVE
CVE
added 2017/08/08 3:00 p.m.91 views

CVE-2017-10075

Oracle WebCenter Content (Content Server) versions 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0 are susceptible to Cross-Site Scripting (XSS). The vulnerability allows an unauthenticated, network-accessing attacker (via HTTP) to cause the browser of visiting users to execute HTML/JavaScript, potentiall...

8.2CVSS7.8AI score0.17558EPSS
SaveExploits1References3Affected Software1
Packet Storm
Packet Storm
added 2017/07/22 12:00 a.m.49 views

Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS

Oracle Web Center XSS Details ======================================================================================== Product: Oracle Web Center Versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Security-Risk: High Remote-Exploit: yes Vendor-URL: https://www.oracle.com/ CVE-ID: CVE-2017-10075 CVSS: 8....

8.3AI score0.17558EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2017/07/21 12:00 a.m.25 views

Oracle WebCenter Content Server Multiple Vulnerabilities (July 2017 CPU)

The version of Oracle WebCenter Content running on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Content Server component that allows an unauthenticated, remote attacker to impact confidentiality and integrity. Note that this issue only applies to...

8.2CVSS7.8AI score0.17558EPSS
SaveExploits1References3
OSV
OSV
added 2017/01/19 8:59 p.m.6 views

DEBIAN-CVE-2016-10075

The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...

7.8CVSS7.8AI score0.00441EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2017/01/19 8:59 p.m.22 views

CVE-2016-10075

The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...

7.8CVSS7.4AI score0.00441EPSS
SaveExploits0References2
CVE
CVE
added 2017/01/19 8:00 p.m.74 views

CVE-2016-10075

CVE-2016-10075 affects the tqdm Python package, specifically the tqdm._version module, with vulnerable versions including 4.4.1 and 4.10. A local attacker could cause arbitrary code execution by crafting a git log in the current working directory. The issue arises from how the module processes re...

7.8CVSS7.5AI score0.00441EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder