Lucene search
K

8 matches found

Prion
Prion
added 2018/06/13 11:29 a.m.13 views

Code injection

system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code...

4.3CVSS5.9AI score0.0024EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2018/06/13 11:0 a.m.40 views

CVE-2018-12266

CVE-2018-12266 affects HongCMS 3.0.0, with a cross-site scripting vulnerability in system\errors\404.php triggered by crafted input that leads to a 404 response. Public sources (NVD/CNVD) describe an XSS flaw in this page; no patch/version details are provided in the supplied documents. The root ...

6.1CVSS5.9AI score0.0024EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2013/07/10 10:55 a.m.14 views

CVE-2013-2873

Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources...

7.5CVSS7.2AI score0.00887EPSS
Exploits0References5
Prion
Prion
added 2013/07/10 10:55 a.m.14 views

Design/Logic Flaw

Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources...

7.5CVSS7.8AI score0.00887EPSS
Exploits0References5Affected Software2
CVE
CVE
added 2013/07/10 10:0 a.m.67 views

CVE-2013-2873

CVE-2013-2873 is a use-after-free vulnerability in Chrome/Chromium related to resource loading. Affected product: Google Chrome before 28.0.1500.71 (and Chromium components referenced in advisories). Impact per sources: potential denial of service and possibly other unspecified effects via exploi...

7.5CVSS7.2AI score0.00887EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2013/07/10 10:0 a.m.23 views

CVE-2013-2873

Removed by vendor...

7.5CVSS6.7AI score0.00887EPSS
Exploits0
Cvelist
Cvelist
added 2010/10/12 9:0 p.m.11 views

CVE-2010-3903

Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...

6.5AI score0.00305EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2010/10/12 9:0 p.m.13 views

CVE-2010-3903

Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...

5CVSS6.1AI score0.00305EPSS
Exploits0
Rows per page
Query Builder