Lucene search
+L

32 matches found

Openbugbounty
Openbugbounty
added 2018/10/02 7:52 p.m.9 views

baur.de XSS vulnerability

Open Bug Bounty ID: OBB-682015 Description| Value ---|--- Affected Website:| baur.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Cvelist
Cvelist
added 2018/02/06 2:00 p.m.34 views

CVE-2016-6813

Apache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to register for the developer API. If a malicious user is able to determine the ID of another non-"root" CloudStack user, the malicious user may be able to reset the API keys for the other user, in turn...

9.4AI score0.05592EPSS
SaveExploits0References3
CVE
CVE
added 2018/02/06 2:00 p.m.67 views

CVE-2016-6813

CVE-2016-6813 affects Apache CloudStack 4.1–4.8.1.0 and 4.9.0.0. The issue is an API call that lets a user register for the developer API, and if the attacker can determine another non-root user’s CloudStack ID, they may reset that user’s API keys and gain access to their account and resources. T...

9.8CVSS9.3AI score0.05592EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/05/23 4:29 a.m.23 views

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

9.8CVSS9.4AI score0.02569EPSS
SaveExploits0References3
CVE
CVE
added 2017/05/23 3:56 a.m.64 views

CVE-2017-6813

CVE-2017-6813 affects Zimbra Collaboration Suite (ZCS) prior to version 8.7.6. The issue is an insufficient privilege check in a service, allowing certain operations to be carried out without required privileges, which constitutes elevation of privilege. Public references describe ZCS 8.7.6 as a ...

9.8CVSS9.3AI score0.02569EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/05/23 3:56 a.m.29 views

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

9.5AI score0.02569EPSS
SaveExploits0References3
CVE
CVE
added 2014/09/30 10:00 a.m.35 views

CVE-2014-6813

The CVE-2014-6813 entry concerns the Android app klassens (com.mcreda.klassens.apps) version 1.0, which does not verify X.509 certificates from SSL servers. This underlying flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Connec...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/05/14 12:00 a.m.20 views

Proficy Portal SCADA server detection

Binary data 6813.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/01/25 12:00 a.m.34 views

SuSE 11.2 Security Update : ghostscript (SAT Patch Number 6813)

This update fixes an array index error leading to a heap-based buffer overflow in ghostscript-library. CVE-2012-4405 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

6.8CVSS5.2AI score0.07486EPSS
SaveExploits0References3
CVE
CVE
added 2009/05/21 6:00 p.m.53 views

CVE-2008-6813

CVE-2008-6813 affects phpWebNews 0.2 MySQL Edition; the vulnerability is a SQL injection in index.php via the id_kat parameter, allowing remote attackers to issue arbitrary SQL commands. The issue is documented across multiple sources; the connected documents provide the vulnerability description...

7.5CVSS8.6AI score0.00987EPSS
SaveExploits2References3Affected Software1
Circl
Circl
added 2008/07/03 12:00 a.m.8 views

CVE-2008-6813

creationtimestamp| type| source ---|---|--- 2008-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5998...

7.5CVSS5.8AI score0.00987EPSS
SaveExploits2References1
CVE
CVE
added 2006/12/29 11:00 a.m.42 views

CVE-2006-6813

CVE-2006-6813 affects Mxmania File Upload Manager (FUM) up to version 1.0.6. The vulnerability is an SQL injection in detail.asp via the ID parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented in NVD records for CVE-2006-6813. The connected documents confirm ...

7.5CVSS8.8AI score0.01192EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder