8 matches found
CVE-2020-19554
creationtimestamp| type| source ---|---|--- 2021-09-22 00:28:19+00:00| seen| https://t.me/cibsecurity/29207...
CVE-2020-19554
Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...
CVE-2020-19554
The CVE-2020-19554 entry concerns a Cross Site Scripting (XSS) vulnerability in ManageEngine OPManager versions up to 12.5.174, triggered when an API key carries an XML-based XSS payload. Connected sources corroborate the same issue across multiple repositories, consistently describing OPManager
CVE-2020-19554
Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...
pizzamarket.com Improper Access Control vulnerability OBB-1320052
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2018-19554
An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/imagetool.jsp...
CVE-2018-19554
CVE-2018-19554 affects DotCMS up to version 5.0.3. The issue is an XSS vulnerability that can be triggered via the inode, identifier, or fieldName parameters in the file html/js/dotcms/dijit/image/image_tool.jsp. The available documents identify the vulnerable surface but do not provide a concret...
IBM eGatherer <= 3.20.0284.0 (ActiveX) Remote Code Execution Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...