Lucene search
K

8 matches found

Circl
Circl
added 2021/09/22 12:28 a.m.0 views

CVE-2020-19554

creationtimestamp| type| source ---|---|--- 2021-09-22 00:28:19+00:00| seen| https://t.me/cibsecurity/29207...

6.1CVSS6.1AI score0.00317EPSS
Exploits0References1
NVD
NVD
added 2021/09/21 8:15 p.m.10 views

CVE-2020-19554

Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...

6.1CVSS0.00317EPSS
Exploits0References1
CVE
CVE
added 2021/09/21 7:7 p.m.40 views

CVE-2020-19554

The CVE-2020-19554 entry concerns a Cross Site Scripting (XSS) vulnerability in ManageEngine OPManager versions up to 12.5.174, triggered when an API key carries an XML-based XSS payload. Connected sources corroborate the same issue across multiple repositories, consistently describing OPManager

6.1CVSS5.7AI score0.00317EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/21 7:7 p.m.11 views

CVE-2020-19554

Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...

5.8AI score0.00317EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2020/09/10 8:13 a.m.11 views

pizzamarket.com Improper Access Control vulnerability OBB-1320052

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.6AI score
Exploits0
OSV
OSV
added 2018/11/26 7:29 a.m.12 views

CVE-2018-19554

An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/imagetool.jsp...

5.4CVSS6AI score
Exploits0References1
CVE
CVE
added 2018/11/26 7:0 a.m.35 views

CVE-2018-19554

CVE-2018-19554 affects DotCMS up to version 5.0.3. The issue is an XSS vulnerability that can be triggered via the inode, identifier, or fieldName parameters in the file html/js/dotcms/dijit/image/image_tool.jsp. The available documents identify the vulnerable surface but do not provide a concret...

5.4CVSS5.2AI score0.00162EPSS
Exploits0References1Affected Software1
seebug.org
seebug.org
added 2006/08/29 12:0 a.m.23 views

IBM eGatherer <= 3.20.0284.0 (ActiveX) Remote Code Execution Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

9.3CVSS6.5AI score0.46308EPSS
Exploits10
Rows per page
Query Builder