CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2488 matches found

OpenVAS•added 2012/02/08 12:00 a.m.•43 views

Apache Struts <= 1.3.10 CookBook/Examples Multiple XSS Vulnerabilities

Apache Struts is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS8.5AI score0.32784EPSS

SaveExploits2References3

NVD•added 2012/02/07 4:09 a.m.•28 views

CVE-2012-1007

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to 2 struts-cookbook/processSimple.do or 3...

4.3CVSS7.2AI score0.32784EPSS

SaveExploits2References6

Prion•added 2012/02/07 4:09 a.m.•26 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 lastName parameter to struts2-showcase/person/editPerson.action, or the 3 clientName parameter to struts2-rest-showcase/orders...

4.3CVSS6AI score0.56607EPSS

SaveExploits2References4Affected Software1

UbuntuCve•added 2012/02/07 4:09 a.m.•40 views

CVE-2012-1007

4.3CVSS7.2AI score0.32784EPSS

SaveExploits2References3

Prion•added 2012/02/07 4:09 a.m.•25 views

Cross site scripting

4.3CVSS5.9AI score0.32784EPSS

SaveExploits2References6Affected Software1

UbuntuCve•added 2012/02/07 4:09 a.m.•34 views

CVE-2012-1006

4.3CVSS7.3AI score0.56607EPSS

SaveExploits2References3

Cvelist•added 2012/02/07 2:00 a.m.•43 views

CVE-2012-1006

8.3AI score0.56607EPSS

SaveExploits2References4

Cvelist•added 2012/02/07 2:00 a.m.•50 views

CVE-2012-1007

7.9AI score0.32784EPSS

SaveExploits2References6

Mend•added 2012/02/07 2:00 a.m.•7 views

CVE-2012-1006

6.3CVSS0.56607EPSS

SaveExploits2References8

CVE•added 2012/02/07 2:00 a.m.•165 views

CVE-2012-1007

CVE-2012-1007 is an XSS vulnerability in Apache Struts 1.3.10. The issue allows remote attackers to inject arbitrary scripts via (1) name in struts-examples/upload/upload-submit.do, or (2) message in struts-cookbook/processSimple.do, or (3) struts-cookbook/processDyna.do. The IBM/OSS sources iden...

4.3CVSS7.6AI score0.32784EPSS

SaveExploits2References6Affected Software1

CVE•added 2012/02/07 2:00 a.m.•108 views

CVE-2012-1006

CVE-2012-1006 refers to multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3. The flaws allow remote attackers to inject arbitrary web script or HTML via parameters in the Struts2 showcase applications: (1) name, (2) lastName to struts2-showcase/person/editPerson....

4.3CVSS5.6AI score0.56607EPSS

SaveExploits2References4Affected Software1

Mend•added 2012/02/07 2:00 a.m.•6 views

CVE-2012-1007

6.3CVSS0.32784EPSS

SaveExploits2References7

Positive Technologies•added 2012/02/07 12:00 a.m.•7 views

PT-2012-3010

Name of the Vulnerable Software and Affected Versions Apache Struts version 1.3.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain API endpoints. The vulnerable parameters include the name parameter to...

4.3CVSS0.32784EPSS

SaveExploits2References9

Rapid7 Vulnerability Database (full)•added 2012/02/07 12:00 a.m.•8 views

CVE-2012-1006: Improper Neutralization of Input During Web Page Generation

4.3CVSS5.9AI score0.56607EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2012/02/07 12:00 a.m.•7 views

CVE-2012-1007: Improper Neutralization of Input During Web Page Generation

4.3CVSS5.9AI score0.32784EPSS

SaveExploits2References2

Packet Storm•added 2012/02/03 12:00 a.m.•40 views

Apache Struts 1.3.10 / 2.0.14 / 2.2.3 Cross Site Scripting

Title : Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://struts.apache.org/ Advisory : http://secpod.org/blog/?p=450 http://secpod.org/advisories/SecPodApacheStrutsMultipleParsistantXSSVulns.txt Software...

0.1AI score

SaveExploits0

Exploit DB•added 2012/02/02 12:00 a.m.•65 views

Apache Struts - Multiple Persistent Cross-Site Scripting Vulnerabilities

4.3CVSS6.8AI score0.56607EPSS

SaveExploits3

zdt•added 2012/02/02 12:00 a.m.•19 views

Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit for multiple platform in category web applications Title : Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://struts.apache.org/ Advisory : http://secpod.org/blog/?p=450...

7.1AI score

SaveExploits0

exploitpack•added 2012/02/02 12:00 a.m.•25 views

Apache Struts - Multiple Persistent Cross-Site Scripting Vulnerabilities

Apache Struts - Multiple Persistent Cross-Site Scripting Vulnerabilities Title : Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://struts.apache.org/ Advisory : http://secpod.org/blog/?p=450...

7AI score

SaveExploits0

Positive Technologies•added 2012/02/01 12:00 a.m.•7 views

PT-2012-1242

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.14 through 2.2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name or lastName parameter to "struts2-showcase/person/editPerson.action", or the clientName parameter to...

4.3CVSS0.56607EPSS

SaveExploits2References14

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by