Lucene search
+L

270 matches found

OSV
OSV
added 2022/01/05 12:15 p.m.10 views

CVE-2021-31589

A cross-site scripting XSS vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization...

6.1CVSS6.2AI score0.28207EPSS
SaveExploits3References3
Prion
Prion
added 2022/01/05 12:15 p.m.14 views

Cross site scripting

A cross-site scripting XSS vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization...

4.3CVSS6.2AI score0.28207EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2022/01/05 11:26 a.m.221 views

CVE-2021-31589

BeyondTrust Secure Remote Access Base software up to version 6.0.1 is affected by a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unsanitized web requests, with documented impact including potential execution of JavaScript i...

6.1CVSS6.1AI score0.28207EPSS
SaveIn wildExploits3References3Affected Software1
Cvelist
Cvelist
added 2022/01/05 11:26 a.m.31 views

CVE-2021-31589

A cross-site scripting XSS vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization...

6.4AI score0.28207EPSS
SaveExploits3References3
zdt
zdt
added 2022/01/05 12:00 a.m.248 views

BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (Unauthenticated) Vulnerability

Exploit Title: BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting XSS Unauthenticated Google Dork: intext:"BeyondTrust" "Redistribution Prohibited" Exploit Author: Malcrove Vendor Homepage: https://www.beyondtrust.com/ Version: v6.0 and earlier versions Summary: Unauthenticated...

SaveExploits0
Exploit DB
Exploit DB
added 2022/01/05 12:00 a.m.467 views

BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

Exploit Title: BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting XSS Unauthenticated Google Dork: intext:"BeyondTrust" "Redistribution Prohibited" Date: 30/12/2021 Exploit Author: Malcrove Vendor Homepage: https://www.beyondtrust.com/ Version: v6.0 and earlier versions Summary:...

5.3AI score
SaveExploits0
CNVD
CNVD
added 2022/01/05 12:00 a.m.70 views

BeyondTrust Remote Support Cross-Site Request Forgery Vulnerability

BeyondTrust Remote Support is a remote desktop access, help desk and collaboration software for Windows, Mac, Linux, Ios iPad, iPhone, etc. BeyondTrust Remote Support is vulnerable to cross-site request forgery. The vulnerability stems from the lack of proper validation of client-side data in the...

6.1CVSS2.8AI score0.28207EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2022/01/03 12:00 a.m.8 views

BeyondTrust Remote Support 跨站脚本漏洞

BeyondTrust Remote Support is a remote desktop access, help desk and collaboration software for Windows, Mac, Linux, Ios iPad, iPhone, etc. BeyondTrust Remote Support is vulnerable to cross-site request forgery. The vulnerability stems from the lack of proper validation of client-side data in the...

6.1CVSS5.6AI score0.28207EPSS
SaveExploits3References5
Packet Storm
Packet Storm
added 2022/01/03 12:00 a.m.262 views

BeyondTrust Remote Support 6.0 Cross Site Scripting

Exploit Title: BeyondTrust Remote Support - Reflected Cross-Site Scripting XSS Unauthenticated Google Dork: intext:"BeyondTrust" "Redistribution Prohibited" Date: 30/12/2021 Exploit Author: Malcrove Vendor Homepage: https://www.beyondtrust.com/ Version: v6.0 and earlier versions CVE: CVE-2021-315...

6.3AI score0.28207EPSS
SaveExploits3
zdt
zdt
added 2022/01/03 12:00 a.m.300 views

BeyondTrust Remote Support 6.0 Cross Site Scripting Vulnerability

BeyondTrust Remote Support versions 6.0 and below suffer from a cross site scripting vulnerability. Exploit Title: BeyondTrust Remote Support - Reflected Cross-Site Scripting XSS Unauthenticated Google Dork: intext:"BeyondTrust" "Redistribution Prohibited" Date: 30/12/2021 Exploit Author: Malcrov...

6.1CVSS6.2AI score0.28207EPSS
SaveExploits3
OSV
OSV
added 2021/11/19 7:15 p.m.11 views

CVE-2021-42254

BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/19 7:15 p.m.8 views

CVE-2021-42254

BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...

7.8CVSS5.8AI score0.00288EPSS
SaveExploits0References3
NVD
NVD
added 2021/11/19 7:15 p.m.23 views

CVE-2021-42254

BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...

7.8CVSS0.00288EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/19 7:15 p.m.20 views

Directory traversal

BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...

7.2CVSS7.5AI score0.00288EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/11/19 6:04 p.m.50 views

CVE-2021-42254

BeyondTrust Privilege Management prior to version 21.6 exposes a vulnerability where a temporary file is created in a directory with insecure permissions. This is a LOCAL, low-attack complexity issue with high impact (confidentiality, integrity, and availability). Remediation: upgrade to version ...

7.8CVSS7.5AI score0.00288EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/19 6:04 p.m.33 views

CVE-2021-42254

BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...

7.8AI score0.00288EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/19 12:00 a.m.10 views

BeyondTrust Privilege Management 安全漏洞

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management that stems from the fact that BeyondTrust Privilege Management prior to version 21.6 creates temporary...

7.8CVSS7.3AI score0.00288EPSS
SaveExploits0References3
OSV
OSV
added 2020/03/18 3:15 p.m.7 views

CVE-2020-9326

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

7.5CVSS7.1AI score0.01044EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/18 3:15 p.m.22 views

CVE-2020-9326

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

7.5CVSS7.6AI score0.01044EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/18 3:15 p.m.17 views

Design/Logic Flaw

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

5CVSS7.6AI score0.01044EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder