Lucene search
+L

95 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/20 12:00 a.m.•3 views

CVE-2017-18530: Improper Neutralization of Input During Web Page Generation

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.01384EPSS
SaveExploits1References2
NVD
NVD
•added 2019/08/12 4:15 p.m.•26 views

CVE-2017-18501

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

6.1CVSS6.1AI score0.0141EPSS
SaveExploits1References1
CVE
CVE
•added 2019/08/12 3:39 p.m.•84 views

CVE-2017-18501

The CVE-2017-18501 entry concerns the WordPress plugin Social Login by BestWebSoft (social-login-bws) before version 0.2, which contains multiple XSS flaws. The Nuclei template and related references describe cross-site scripting flaws in this plugin, enabling an attacker with authenticated acces...

6.1CVSS6AI score0.0141EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/12 12:00 a.m.•2 views

CVE-2017-18501: Improper Neutralization of Input During Web Page Generation

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

6.1CVSS5.7AI score0.0141EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2018/07/03 12:00 a.m.•34 views

BWS Systems HA-Bridge Remote Detection

Detection of BWS Systems HA-Bridge. The script sends a HTTP connection request to the remote host and attempts to detect if the remote host is BWS Systems HA-Bridge. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

7AI score
SaveExploits0
CNVD
CNVD
•added 2018/07/02 12:00 a.m.•14 views

BWS Systems HA-Bridge Device Information Disclosure Vulnerability

BWS Systems HA-Bridge devices are a product for automating the connection and control of IoT devices. A security vulnerability exists in the BWS Systems HA-Bridge devices. A remote attacker could exploit this vulnerability by sending a direct request to the ! /system URI to obtain sensitive...

7.5CVSS7.5AI score0.01319EPSS
SaveExploits0References1
NVD
NVD
•added 2018/06/28 11:29 a.m.•27 views

CVE-2018-12923

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...

7.5CVSS7.4AI score0.01319EPSS
SaveExploits0References1
Prion
Prion
•added 2018/06/28 11:29 a.m.•22 views

Information disclosure

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...

5CVSS7.3AI score0.01319EPSS
SaveExploits0References1
CVE
CVE
•added 2018/06/28 11:00 a.m.•52 views

CVE-2018-12923

CVE-2018-12923 : The BWS Systems HA-Bridge devices are vulnerable to an information-disclosure issue where a remote attacker can obtain sensitive information by issuing a direct request to the #!/system URI. The available documents identify this as a vulnerability in the HA-Bridge, describing the...

7.5CVSS7.3AI score0.01319EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/06/28 11:00 a.m.•29 views

CVE-2018-12923

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...

7.4AI score0.01319EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/28 12:00 a.m.•7 views

CVE-2018-12923: Exposure of Sensitive Information to an Unauthorized Actor

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...

7.5CVSS7.3AI score0.01319EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2018/06/26 12:00 a.m.•54 views

BWS Systems HA-Bridge is Bridge Application for IoTAnd They do not require any certification

BWS Systems HA-Bridge is Bridge Application for IoTAnd They do not require any certification There are 607 HA-Bridge had Exposed on the internet in ZoomEye : https://www.zoomeye.org/searchResult?q=%22HA%20Bridge%22 Bridge Device list unauth acceess Bridge Settings page http://xx.xx.xx.xx/!/system...

1.3AI score
SaveExploits0
CVE
CVE
•added 2005/05/27 4:00 a.m.•57 views

CVE-2004-2121

CVE-2004-2121 affects Borland Web Server (BWS) 1.0b3 and earlier. It exposes directory-traversal vulnerabilities through untrusted URL sequences (e.g., multiple dots '......' or encoded '..') that allow remote attackers to read/download arbitrary files. No exploitation details or fixes are provid...

5CVSS7.3AI score0.03051EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/27 12:00 a.m.•3 views

CVE-2004-2121: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Borland Web Server BWS 1.0b3 and earlier allow remote attackers to read and download arbitrary files via 1 multi-dot "......" sequences, or 2 "%5c%2e%2e" encoded ".." sequences, in the URL...

5CVSS6AI score0.03051EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2004/01/26 12:00 a.m.•33 views

BWStraversal.txt

Application: BWS Borland Web Server / Corel Paradox Vendors: http://www.Borland.com http://www.Corel.com Corporate mergers confuses the specified vendor. Versions: = 1.0b3 Platforms: Windows Bug: Directory Transversal Vulnerability Risk: High Exploitation: remote with browser Date: 24 Jan 2004...

7.4AI score
SaveExploits0
Rows per page
Query Builder