Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:11 a.m.4 views

CVE-2019-11559

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

6.1CVSS5.9AI score0.00429EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-20366

Malware in sbrugna...

6.5CVSS6.6AI score0.00327EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 2:36 a.m.7 views

CVE-2017-11559

An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack...

7.5CVSS8.1AI score0.07722EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/02/04 4:45 p.m.16 views

CVE-2020-27873

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...

6.5CVSS6.2AI score0.00327EPSS
Exploits0References2
CVE
CVE
added 2019/09/17 2:44 p.m.41 views

CVE-2019-11559

HRworks v1.16.1 is affected by CVE-2019-11559, a reflected XSS in the Login component triggered by a crafted URL parameter. Exploitation details are not provided in the connected sources, but the Red Hat advisory and PT-Security entry confirm the reflection-based script injection as the issue. PT...

6.1CVSS6AI score0.00429EPSS
Exploits1References2Affected Software1
Circl
Circl
added 2019/05/23 6:48 p.m.2 views

CVE-2017-11559

creationtimestamp| type| source ---|---|--- 2019-05-23 18:48:20+00:00| seen| https://t.me/cvemitreorg/234 2019-05-23 23:14:13+00:00| seen| https://t.me/cibsecurity/4500...

7.5CVSS7.1AI score0.07722EPSS
Exploits1References2
CVE
CVE
added 2019/05/23 5:9 p.m.56 views

CVE-2017-11559

ZOHO ManageEngine OpManager 12.2 is affected by a Blind SQL Injection in the apiKey parameter of /api/json/admin/getmailserversettings and /api/json/dashboard/gotoverviewlist. Root cause: lack of input validation/exploitation of SQL statements; impact reported as high confidentiality impact (C/H)...

7.5CVSS7.9AI score0.07722EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2018/05/30 4:0 a.m.48 views

CVE-2018-11559

DomainMod 4.10.0 is affected by a Stored XSS in the profile settings endpoint (/settings/profile/index.php) via the new_last_name parameter. Root cause: persistent injection in the user profile handling leading to script execution when viewed. Impact is limited to what the XSS allows per the sour...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2014/10/02 12:0 a.m.33 views

Fedora Update for python FEDORA-2014-11559

Check the version of python SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868354";...

6.4CVSS7.7AI score0.01134EPSS
Exploits1References2
Rows per page
Query Builder