Lucene search
+L

117 matches found

vulnersOsv
vulnersOsv
added 2022/05/17 5:7 a.m.13 views

com.fmpwizard:lift-named-comet_2.8.2 (=0.3), net.liftweb:lift-couchdb_2.8.2 (>=2.4 <=2.4-RC1) +16 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.2 (>=2.4 <=2.4-RC1)

net.liftweb:lift-webkit2.8.2 MAVEN version =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4, =2.4-RC1 and more Source cves: CVE-2013-3300 Source advisory: OSV:GHSA-JF9V-FXFQ-WM76...

4CVSS5.8AI score0.01477EPSS
Exploits1
OpenVAS
OpenVAS
added 2021/10/07 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2021:3300-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03074EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/06/22 11:56 a.m.28 views

CVE-2010-3300

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks...

5.7AI score0.0045EPSS
Exploits0References2
CVE
CVE
added 2021/06/22 11:56 a.m.60 views

CVE-2010-3300

CVE-2010-3300 affects the OWASP ESAPI for Java up to version 2.0 RC2, where a padding oracle weakness can lead to information disclosure. The issue is documented across multiple sources (NVD/Red Hat/IBM bulletin/OSS advisories). Affected component: OWASP ESAPI for Java; root cause: padding oracle...

5.9CVSS5.7AI score0.0045EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/03/24 8:6 p.m.36 views

CVE-2021-1452 Cisco IOS XE ROM Monitor Software for Cisco Industrial Switches OS Command Injection Vulnerability

A vulnerability in the ROM Monitor ROMMON of Cisco IOS XE Software for Cisco Catalyst IE3200, IE3300, and IE3400 Rugged Series Switches, Cisco Catalyst IE3400 Heavy Duty Series Switches, and Cisco Embedded Services 3300 Series Switches could allow an unauthenticated, physical attacker to execute...

6.8CVSS6.8AI score0.00372EPSS
Exploits0References1
Cisco
Cisco
added 2021/03/24 4:0 p.m.106 views

Cisco IOS XE ROM Monitor Software for Cisco Industrial Switches OS Command Injection Vulnerability

A vulnerability in the ROM Monitor ROMMON of Cisco IOS XE Software for Cisco Catalyst IE3200, IE3300, and IE3400 Rugged Series Switches, Cisco Catalyst IE3400 Heavy Duty Series Switches, and Cisco Embedded Services 3300 Series Switches could allow an unauthenticated, physical attacker to execute...

6.8CVSS2AI score0.00372EPSS
Exploits0References1
NVD
NVD
added 2019/10/16 6:15 p.m.28 views

CVE-2018-3300

Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Xstore...

5.5CVSS4.3AI score0.00799EPSS
Exploits0References1
CVE
CVE
added 2019/10/16 5:40 p.m.46 views

CVE-2018-3300

CVE-2018-3300 affects Oracle Retail Xstore Office (Internal Operations) in Oracle Retail Applications, version 7.1. It is a remote, HTTP-accessible vulnerability exploitable by a low-privilege attacker that can lead to unauthorized read, update, insert, or delete operations on data and limited co...

5.5CVSS4.9AI score0.00799EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2019/07/09 12:0 a.m.6 views

DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 Cross-Site Scripting Vulnerability

DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 is a home wireless router from DIGISOL SYSTEMS India. A cross-site scripting vulnerability exists in the DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300. The vulnerability stems from the lack of proper validation of client data by the WEB...

6.1CVSS6.3AI score0.00833EPSS
Exploits1References1
NVD
NVD
added 2019/07/05 4:15 p.m.20 views

CVE-2018-14027

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...

6.1CVSS6.2AI score0.00833EPSS
Exploits1References1
Prion
Prion
added 2019/07/05 4:15 p.m.16 views

Design/Logic Flaw

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...

4.3CVSS6AI score0.00833EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/07/05 3:43 p.m.22 views

CVE-2018-14027

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...

6.2AI score0.00833EPSS
Exploits1References1
CVE
CVE
added 2019/07/05 3:43 p.m.313 views

CVE-2018-14027

Digisol HR-3300 Wireless Home Router is affected by a cross‑site scripting (XSS) vulnerability, exposed via the userid or password parameter on the admin login page. Multiple connected sources corroborate this vulnerability exists in the Digisol HR-3300 series (e.g., CVE-2018-14027) and describe ...

6.1CVSS6AI score0.00833EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2018/05/29 3:50 p.m.15 views

CVE-2014-3300

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/voip/ciscocucdmspeeddials.rb 2018-05-29 15:50:33+00:00| seen|...

7.5CVSS5.6AI score0.21879EPSS
Exploits4References2
Tenable Nessus
Tenable Nessus
added 2017/05/30 12:0 a.m.49 views

Ubuntu 14.04 LTS / 16.04 LTS : juju-core vulnerability (USN-3300-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3300-1 advisory. Ryan Beisner discovered juju did not set permissions on a Unix domain socket. A local attacker could use this flaw to gain administrative privileges...

10CVSS7.6AI score0.48501EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2017/05/27 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-3300-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.48501EPSS
Exploits5References2
Cvelist
Cvelist
added 2017/01/27 10:1 p.m.33 views

CVE-2017-3300

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Multichannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5.3AI score0.01606EPSS
Exploits2References4
CVE
CVE
added 2017/01/27 10:1 p.m.69 views

CVE-2017-3300

CVE-2017-3300 pertains to Oracle PeopleSoft Enterprise PeopleTools (Multichannel Framework) with affected versions 8.54 and 8.55. The vulnerability is a cross-site scripting (XXS) flaw that can be triggered via HTTP requests, potentially allowing an attacker to hijack session data or access/modif...

6.1CVSS5.5AI score0.01606EPSS
Exploits2References4Affected Software1
0day.today
0day.today
added 2017/01/23 12:0 a.m.66 views

Oracle PeopleSoft HCM 9.2 Cross Site Scripting Vulnerability

Exploit for windows platform in category local exploits Application: Oracle PeopleSoft Vendor: Oracle Bugs: XXS Reported: 31.10.2016 Vendor response: 1.11.2016 Date of Public Advisory: 17.01.2017 Reference: Oracle CPU Jan 2017 Authors: Vahagn Vardanyan, Dmitry Yudin 1. ADVISORY INFORMATION Title:...

5.8CVSS6.7AI score0.01606EPSS
Exploits2
Packet Storm
Packet Storm
added 2017/01/23 12:0 a.m.158 views

Oracle PeopleSoft HCM 9.2 Cross Site Scripting

Application: Oracle PeopleSoft Vendor: Oracle Bugs: XXS Reported: 31.10.2016 Vendor response: 1.11.2016 Date of Public Advisory: 17.01.2017 Reference: Oracle CPU Jan 2017 Authors: Vahagn Vardanyan, Dmitry Yudin 1. ADVISORY INFORMATION Title: Oracle PeopleSoft a XSS vulnerability Advisory ID:...

0.01606EPSS
Exploits2
Rows per page
Query Builder