CVE-2021-3113

creationtimestamp| type| source ---|---|--- 2021-01-17 07:52:59+00:00| seen| https://t.me/cibsecurity/22236...

CVE-2021-3113

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, a...

CVE-2021-3113

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, a...

CVE-2021-3113

Summary: CVE-2021-3113 affects Netsia SEBA+ up to version 0.16.1 build 70-e669dcd7. A direct request to /session/list/allActiveSession can disclose session cookies, potentially exposing an admin’s cookie and enabling admin access if an admin is logged in at the time of the request. Impact (as sta...

Ovirt Engine Reflected Cross Site Scripting (CVE-2016-3113)

A reflected cross site scripting vulnerability exists in Ovirt Engine. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

CVE-2020-3113

CVE-2020-3113 affects Cisco Data Center Network Manager (DCNM) web-based management interface. The vulnerability arises from insufficient validation of user-supplied input, enabling stored XSS when a user is enticed to click a crafted link. Impact could be execution of arbitrary script in the int...

CVE-2017-3113

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in JavaScript engine when creating large strings. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3113

CVE-2017-3113 is an exploitable use-after-free in the JavaScript engine of Adobe Acrobat/Reader (and related Acrobat products) affecting 2017-era builds and earlier. The initial description specifies arbitrary code execution if successfully exploited by creating large strings. Connected OpenVAS e...

Adobe Reader < 11.0.21 / 2015.006.30355 / 2017.011.30066 / 2017.012.20098 Multiple Vulnerabilities (APSB17-24)

The version of Adobe Reader installed on the remote Windows host is a version prior to 11.0.21, 2015.006.30355, 2017.011.30066, or 2017.012.20098. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

CVE-2016-3113

Cross-site scripting XSS vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-3113

Cross-site scripting XSS vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-3113

CVE-2016-3113 is a cross-site scripting vulnerability in the ovirt-engine web UI. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected: ovirt-engine (web UI) component; root cause relates to input handling enabling script/HTML injection. Impact stated by NVD:...

CVE-2016-3113

Cross-site scripting XSS vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-3113-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3113-1 advisory. It was discovered that a long running unload handler could cause an incognito profile to be reused in some circumstances. If a user were...

eltiempo.es XSS vulnerability

Vulnerable URL: http://www.eltiempo.es/futbol/tercera-division-grupo-1"-galicia/1 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3113 Google Pagerank| 0 V...

Mageia: Security Advisory (MGASA-2015-0248)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2 0 1 5-3 1 1 3 analysis-vulnerability warning-the black bar safety net

Fireeye in its 6-month 2 3 day post“Operation ceeinject. Gen! g Wolf”are discussed in a cyber-espionage group, known as APT3, in Adobe Flash using a 0day vulnerability. Unit42 also use the UPS tracking APT3 group, it was originated in China the invasion of the toolset, with the earlier of 0day...

20min.ch XSS vulnerability

Vulnerable URL: http://www.20min.ch/ro/life/lifestyle/story/Lingerie""-affriolante-sur-des-bombes-colombiennes-31519167 Details: Description| Value ---|--- Patched:| Yes, at 01.12.2015 Latest check for patch:| 01.12.2015 08:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

20min.ch XSS vulnerability

Vulnerable URL: http://www.20min.ch/wissen/gesundheit/story/Zion""--8--erhaelt-als-erstes-Kind-zwei-Spender-Haende-30963843 Details: Description| Value ---|--- Patched:| Yes, at 20.08.2015 Latest check for patch:| 20.08.2015 19:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

20min.ch XSS vulnerability

Vulnerable URL: http://www.20min.ch/entertainment/showcase/story/-Ich""-bin-nicht-von-hier--fuehle-mich-aber-zuhause--19801397 Details: Description| Value ---|--- Patched:| Yes, at 01.12.2015 Latest check for patch:| 01.12.2015 08:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...