Lucene search
+L

961 matches found

CVE
CVE
added 2020/09/16 5:38 p.m.104 views

CVE-2020-13928

CVE-2020-13928 – Apache Atlas XSS vulnerability affects Apache Atlas versions before 2.1.0. The issue arises in the basic search/rendering paths where un-sanitized input is processed, enabling cross-site scripting. The vulnerability is documented across multiple feeds (NVD, Red Hat, GHSA, osv, CN...

6.1CVSS6AI score0.02587EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/16 5:38 p.m.45 views

CVE-2020-13928

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability...

6.1AI score0.02587EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2020/07/22 8:32 p.m.8 views

atlas.estate Cross Site Scripting vulnerability OBB-1235207

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2020/07/20 3:30 p.m.58 views

Lock and Code S1Ep11: Locating concerns of Bluetooth and beacon technology with Chris Boyd

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chris Boyd, lead malware intelligence analyst for Malwarebytes, about Bluetooth and beacon technology. Last month, cybersecurity experts warned the publi...

7.1AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/07/15 11:00 a.m.24 views

A New Map Shows the Inescapable Creep of Surveillance

The Atlas of Surveillance shows which tech law enforcement agencies across the country have acquired. It's a sobering look at the present-day panopticon...

2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/06/28 9:31 a.m.11 views

atlasquest.com Cross Site Scripting vulnerability OBB-1209520

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2020/06/10 9:30 p.m.46 views

Atlas - Quick SQLMap Tamper Suggester

Atlas is an open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS, the tool is based on returned status code. Screen Installation $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py python3+ Usage $ python atlas.py --url...

7.2AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/06 6:28 a.m.23 views

Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable to Apache Commons Beanutils in WebSphere Application Server

Summary In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the...

7.5CVSS1.5AI score0.29236EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2020/01/08 5:26 p.m.35 views

GHSA-V62J-FCXQ-J239 Stored XSS in Apache Atlas

Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality...

6.1CVSS5.9AI score0.01787EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2020/01/08 5:26 p.m.69 views

Stored XSS in Apache Atlas

Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality...

6.1CVSS2.1AI score0.01787EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/26 12:00 a.m.9 views

The vulnerability of the Apache Atlas metadata management system, related to the lack of measures for cleaning incoming data, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Apache Atlas metadata management system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.4CVSS6.1AI score0.01787EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/12/17 12:00 a.m.8 views

Apache Atlas Cross-Site Scripting Vulnerability

Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in the search function in Apache Atlas versions 0.8.3 and 1.1.0. The vulnerability stems from a lack of proper validation of...

9.8CVSS6.4AI score0.01335EPSS
SaveExploits1References1
OSV
OSV
added 2019/11/29 9:15 p.m.11 views

CVE-2019-5247

Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash...

5.5CVSS6.4AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
added 2019/11/29 9:15 p.m.20 views

CVE-2019-5247

Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash...

5.5CVSS5.6AI score0.00188EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/29 9:15 p.m.16 views

Buffer overflow

Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash...

2.1CVSS5.6AI score0.00188EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2019/11/29 8:05 p.m.62 views

CVE-2019-5247

The CVE-2019-5247 issue affects Huawei Atlas 300 and Atlas 500 products. A buffer overflow vulnerability exists in the Atlas software that can be triggered by a local, authenticated attacker by crafting and sending specific parameters to a process, potentially causing a denial of service via serv...

5.5CVSS5.6AI score0.00188EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/11/27 12:00 a.m.6 views

Huawei Atlas 300 and Atlas 500 Buffer Overflow Vulnerability

Huawei Atlas 300 and Atlas 500 are both products of Huawei, a Chinese company.Atlas 300 is an AI Artificial Intelligence accelerator card. The product is suitable for AI training and reasoning scenarios. A buffer overflow vulnerability exists in Huawei Atlas 300 version 1.0.0 and Huawei Atlas 500...

5.5CVSS6.8AI score0.00188EPSS
SaveExploits0References1
Huawei
Huawei
added 2019/11/27 12:00 a.m.63 views

Security Advisory - Buffer Overflow Vulnerability in Huawei Atlas Product

There is a buffer overflow vulnerability in Huawei Atlas product. A local, authenticated attacker may craft specific parameter and send to the process to exploit this vulnerability. Successfully exploit may cause service crash. Vulnerability ID: HWPSIRT-2019-08062 This vulnerability has been...

5.5CVSS5.6AI score0.00188EPSS
SaveExploits0Affected Software2
OpenVAS
OpenVAS
added 2019/11/26 12:00 a.m.30 views

Apache Atlas XSS Vulnerability (Nov 2019)

Apache Atlas is prone to a stored cross-site scripting XSS vulnerability in the search functionality. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

6.1CVSS6AI score0.01787EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/19 12:00 a.m.16 views

Apache Atlas Stored Cross-Site Scripting Vulnerability

Apache Atlas is a scalable set of core infrastructure governance services that enable organizations to efficiently meet compliance requirements in Hadoop and allow integration with the entire enterprise data ecosystem. A stored cross-site scripting vulnerability exists in the search function in...

6.1CVSS6.2AI score0.01787EPSS
SaveExploits0References1
Rows per page
Query Builder