Lucene search
+L

7037 matches found

CISA
CISA
•added 2019/07/22 12:00 a.m.•29 views

5G Wireless Network Risk Factors

The Cybersecurity and Infrastructure Security Agency CISA has released an infographic on 5G wireless network risk factors. Although 5G technology will bring capacity, reliability, and security improvements, it may also introduce supply chain, deployment, network security, and competition and choi...

7AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2019/07/16 2:27 a.m.•125 views

Exploit for Injection in Atlassian Jira_Server

CVE-2019-11581 Atlassian JIRA Template injection vulnerabil...

9.8CVSS8.3AI score0.84621EPSS
SaveExploits3
NVD
NVD
•added 2019/07/15 4:15 a.m.•21 views

CVE-2019-1010028

phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/sendreply/. The attack vector is:...

6.1CVSS6.2AI score0.00675EPSS
SaveExploits1References1
Prion
Prion
•added 2019/07/15 4:15 a.m.•22 views

Cross site scripting

phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/sendreply/. The attack vector is:...

4.3CVSS6.2AI score0.00675EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/07/15 3:24 a.m.•28 views

CVE-2019-1010028

phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/sendreply/. The attack vector is:...

6.2AI score0.00675EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/07/15 12:00 a.m.•6 views

PT-2019-11442

Name of the Vulnerable Software and Affected Versions: phpscriptsmall.com School College Portal with ERP Script versions 2.6.1 and earlier Description: The issue allows attackers to target administrators, teachers, and students. It involves a Cross Site Scripting XSS attack, which can be executed...

6.1CVSS0.00675EPSS
SaveExploits1References3
Citrix
Citrix
•added 2019/07/11 12:00 a.m.•21 views

Workspace app for ios default display settings

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. What is the default setting for Workspace app for iOS on iPhones? Display settings are not all the...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/07/11 12:00 a.m.•78 views

Atlassian JIRA Server & JIRA Data Center Template Injection Vulnerability

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators...

9.8CVSS8.6AI score0.84621EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2019/07/11 12:00 a.m.•28 views

Atlassian JIRA 7.6.x < 7.6.14, 7.13.x < 7.13.5, 8.0.x < 8.0.3, 8.1.x < 8.1.2, 8.2.x < 8.2.3 RCE

Binary data 700899.prm...

9.8CVSS8.3AI score0.84621EPSS
SaveExploits3References3
Prion
Prion
•added 2019/07/10 5:15 p.m.•34 views

Code injection

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token...

4CVSS6.5AI score0.01644EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2019/07/10 5:15 p.m.•29 views

CVE-2018-19583

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token...

6.5CVSS6.8AI score0.01644EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/07/10 4:43 p.m.•38 views

CVE-2018-19583

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token...

6.4AI score0.01644EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2019/07/10 4:43 p.m.•39 views

CVE-2018-19583

Removed by vendor...

6.5CVSS6.9AI score0.01644EPSS
SaveExploits0
NVD
NVD
•added 2019/07/10 3:15 p.m.•31 views

CVE-2018-14831

An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI...

4.9CVSS4.9AI score0.01591EPSS
SaveExploits1References1
Prion
Prion
•added 2019/07/10 3:15 p.m.•27 views

Arbitrary file deletion

An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI...

4CVSS4.9AI score0.01591EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/07/10 2:29 p.m.•35 views

CVE-2018-14831

An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI...

4.9AI score0.01591EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/07/10 12:00 a.m.•5 views

PT-2019-9054

Name of the Vulnerable Software and Affected Versions DamiCMS version 6.0.0 Description The issue allows remote authenticated administrators to read any files on the server by crafting a specific URI, /admin.php?s=Tpl/Add/id/. This is an arbitrary file read vulnerability. Recommendations For...

4.9CVSS0.01591EPSS
SaveExploits1References3
The Hacker News
The Hacker News
•added 2019/07/09 6:00 p.m.•158 views

Microsoft Releases July 2019 Security Updates, 2 Flaws Under Active Attack

Microsoft today released its monthly batch of software security updates for the July month to patch a total of 77 vulnerabilities, 14 are rated Critical, 62 are Important, and 1 is rated Moderate in severity. The July 2019 security updates include patches for various supported versions of Windows...

7.8CVSS2.9AI score0.09867EPSS
SaveExploits3
Microsoft KB
Microsoft KB
•added 2019/07/09 7:00 a.m.•113 views

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB4507422)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Server 2012 R2 KB4507422 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft...

8.8CVSS7.9AI score0.09996EPSS
SaveExploits0
NVD
NVD
•added 2019/07/05 2:15 p.m.•31 views

CVE-2019-5974

Cross-site request forgery CSRF vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS8.8AI score0.01036EPSS
SaveExploits0References3
Rows per page
Query Builder