Lucene search
+L

69 matches found

CVE
CVE
added 2017/05/11 2:01 p.m.28 views

CVE-2006-5996

This CVE entry is rejected/not used and does not represent an active vulnerability.

7.4AI score
SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.13 views

CVE-2006-5996

...

SaveExploits0
CVE
CVE
added 2016/09/26 1:00 a.m.56 views

CVE-2016-5996

CVE-2016-5996 affects IBM Tealeaf Customer Experience web portal and is caused by not enforcing minimum password-length restrictions, enabling brute-force access attempts via remote authentication. Affected versions include 8.0–9.0.2 (with specific FP/Patch levels listed by IBM), notably 8.7.1.88...

7.5CVSS7.2AI score0.01381EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2015/12/31 2:00 a.m.82 views

CVE-2015-5996

CVE-2015-5996 affects Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N (firmware 5.07.50). The vulnerability is Cross-Site Request Forgery (CSRF) in the web management interface, allowing an attacker to perform actions with the same permissions as a logged-in user, including potenti...

8.8CVSS8.9AI score0.01383EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
added 2015/12/31 2:00 a.m.42 views

CVE-2015-5996

Cross-site request forgery CSRF vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users...

9.1AI score0.01383EPSS
SaveExploits4References2
CVE
CVE
added 2014/09/22 10:00 a.m.33 views

CVE-2014-5996

CVE-2014-5996 affects the Android app “DEKRA Used Car Report” (com.dekra.maengelreport) version 3.0.0, where X.509 certificate validation is not performed for SSL connections. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2013/11/21 2:00 a.m.55 views

CVE-2013-5996

EC-CUBE vulnerable to cross-site scripting (XSS) in the shopping/payment.tpl components. Affected product/version range: EC-CUBE 2.11.0 through 2.13.0. Root cause described as XSS via crafted values, enabling remote script/HTML execution in the user’s browser. Remediation: apply the update/patch ...

4.3CVSS5.9AI score0.01883EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2009/01/28 3:00 p.m.46 views

CVE-2008-5996

CVE-2008-5996 is a Cross-site scripting (XSS) vulnerability in the Drupal Simplenews module (5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4). It allows remote authenticated users who possess "administer taxonomy" permissions to inject arbitrary web script or HTML via a Newsletter category field....

3.5CVSS5.5AI score0.00842EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2007/11/15 10:00 p.m.61 views

CVE-2007-5996

CVE-2007-5996 describes an SQL injection vulnerability in the Softbiz Link Directory Script. The vulnerable component is the searchresult.php script, where user-provided sbcat_id can be exploited to execute arbitrary SQL commands. This CVE is related to CVE-2007-5449 (Softbiz Recipes Portal Scrip...

7.5CVSS8.3AI score0.00987EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder