Lucene search
+L

12 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•5 views

CVE-2021-3774: Cleartext Transmission of Sensitive Information

Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...

7.4CVSS5.9AI score0.00726EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2018/10/17 12:00 a.m.•101 views

TP-Link TL-SC3130 1.6.18 Unauthenticated RTSP Stream Disclosure

TP-Link TL-SC3130 1.6.18 Unauthenticated RTSP Stream Disclosure Vulnerability Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.com Affected version: 1.6.18P12121101 Summary: The TL-SC3130G surveillance camera is a versatile solution for your home and office monitoring,...

0.4AI score0.11475EPSS
SaveExploits4
CVE
CVE
•added 2011/11/02 9:00 p.m.•59 views

CVE-2010-4971

CVE-2010-4971 : A cross-site scripting (XSS) vulnerability affects the VideoWhisper PHP 2 Way Video Chat component for Joomla!, allowing remote attackers to inject arbitrary script or HTML via the r parameter to index.php. The root cause is improper handling of user-supplied input in this paramet...

4.3CVSS6AI score0.01528EPSS
SaveExploits2References5Affected Software1
Positive Technologies
Positive Technologies
•added 2011/11/02 12:00 a.m.•7 views

PT-2011-1906

Name of the Vulnerable Software and Affected Versions VideoWhisper PHP 2 Way Video Chat component for Joomla affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or...

4.3CVSS0.01528EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/11/02 12:00 a.m.•8 views

CVE-2010-4971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

4.3CVSS5.9AI score0.01528EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2010/06/12 12:00 a.m.•42 views

Joomla VideoWhisper 2 Way Video Chat Cross Site Scripting

====================================================== Joomla VideoWhisper 2 Way Video Chat XSS Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

7.4AI score
SaveExploits0
zdt
zdt
•added 2010/06/10 12:00 a.m.•221 views

Joomla VideoWhisper 2 Way Video Chat XSS Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla VideoWhisper 2 Way Video Chat XSS Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/03/10 5:00 a.m.•31 views

CVE-2004-1756

BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers...

6.6AI score0.01241EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/10 12:00 a.m.•5 views

CVE-2004-1755: Undefined Security Weakness

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges...

7.5CVSS5.9AI score0.01473EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/10 12:00 a.m.•7 views

CVE-2004-1756: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers...

5CVSS5.9AI score0.01241EPSS
SaveExploits0References1
NVD
NVD
•added 2004/12/31 5:00 a.m.•22 views

CVE-2004-1755

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges...

7.5CVSS6.8AI score0.01473EPSS
SaveExploits0References5
NVD
NVD
•added 2004/04/13 4:00 a.m.•25 views

CVE-2004-1756

BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers...

5CVSS6.6AI score0.01241EPSS
SaveExploits0References6
Rows per page
Query Builder