Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 12:34 a.m.•18 views

CVE-2010-3903

Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...

5CVSS6.8AI score0.0098EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/17 5:45 a.m.•84 views

GHSA-7GFC-2V6G-6W9F Paste is vulnerable to Cross-site Scripting via vectors involving a 404 status code

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

6.1CVSS5.3AI score0.02288EPSS
SaveExploits0References13
Hacker One
Hacker One
•added 2019/08/26 1:17 a.m.•37 views

ZEIT: Unauthorized admission to any team in zeit.co

step no.1: open : https://zeit.co/teams/invite/ XXXX and this is a code "CzKyCgbB" of joining in a team called "maxhacker" if we generate a list consists of 8 capital and small letters with any generate tools F565462 knowing that the invitation code of any team is constant...

0.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/13 12:00 a.m.•4 views

CVE-2018-12266: Improper Neutralization of Input During Web Page Generation

system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code...

6.1CVSS6.4AI score0.00707EPSS
SaveExploits1References2
Atlassian
Atlassian
•added 2014/07/14 9:21 a.m.•33 views

Information disclosure in the REST API

Jira reports the 404 not-found earlier than the 401 not-authorized. This discloses the non-existence of a specific issue numbers to unauthorized users. While this isn't a huge leak, this could come in useful with social engineering. Proof of concept: Both of the calls below are unauthenticated, a...

7AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2010/11/06 12:00 a.m.•49 views

CVE-2010-2477

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

4.3CVSS5.6AI score0.02288EPSS
SaveExploits0References9
Prion
Prion
•added 2010/11/06 12:00 a.m.•19 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

4.3CVSS6AI score0.02288EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2010/11/06 12:00 a.m.•40 views

PYSEC-2010-29

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

4.3CVSS3.8AI score0.02288EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2010/11/05 10:00 p.m.•53 views

CVE-2010-2477

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

5.5AI score0.02288EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/05 12:00 a.m.•3 views

CVE-2010-2477: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

4.3CVSS5.9AI score0.02288EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/11/05 12:00 a.m.•26 views

CVE-2010-2477

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

4.3CVSS5.9AI score0.02288EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/03/19 12:00 a.m.•5 views

CVE-2007-1504: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Servlet Service in Fujitsu Interstage Application Server IJServer 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes...

4.3CVSS6AI score0.01551EPSS
SaveExploits0References1
Rows per page
Query Builder