Lucene search
K

7 matches found

NVD
NVD
added 2020/11/09 9:15 p.m.8 views

CVE-2020-4651

IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186024...

4.8CVSS5.2AI score0.00043EPSS
Exploits0References2
CVE
CVE
added 2020/11/09 8:25 p.m.39 views

CVE-2020-4651

CVE-2020-4651 affects IBM Maximo Spatial Asset Management, specifically versions 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0. The issue is a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform malicious, unauthorized actions on behalf of a trusted user. The root cau...

4.8CVSS5.2AI score0.00043EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/04/17 12:0 a.m.2 views

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2020-25565)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.6.1.0, 7.6.0.10, and 7.6.1.1. A remote attacker can exploit the vulnerability to inject arbitrary...

6.1CVSS6.4AI score0.00166EPSS
Exploits0References1
NVD
NVD
added 2020/02/24 4:15 p.m.15 views

CVE-2019-4745

IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883...

4.3CVSS4.1AI score0.00179EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/02/24 3:35 p.m.18 views

CVE-2019-4745

IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883...

4.3CVSS4.1AI score0.00179EPSS
Exploits0References2
0day.today
0day.today
added 2015/04/08 12:0 a.m.29 views

Shareaholic 7.6.0.3 Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Shareaholic 7.6.0.3 XSS Date: 10-11-2014 Software Link: https://wordpress.org/plugins/shareaholic/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ CVE: CVE-2014-9311...

3.5CVSS6.6AI score0.00374EPSS
Exploits5
Packet Storm
Packet Storm
added 2015/04/07 12:0 a.m.30 views

WordPress Shareaholic 7.6.0.3 Cross Site Scripting

Exploit Title: Shareaholic 7.6.0.3 XSS Date: 10-11-2014 Software Link: https://wordpress.org/plugins/shareaholic/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ CVE: CVE-2014-9311 Category: webapps 1. Description...

3.5CVSS6.6AI score0.00374EPSS
Exploits5
Rows per page
Query Builder