Lucene search
+L

4680 matches found

NVD
NVD
•added 2017/11/14 9:29 p.m.•23 views

CVE-2017-9394

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user...

5.4CVSS5AI score0.00642EPSS
SaveExploits1References2
Prion
Prion
•added 2017/11/14 9:29 p.m.•29 views

Cross site scripting

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user...

3.5CVSS5.8AI score0.00642EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2017/11/14 9:00 p.m.•42 views

CVE-2017-9394

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user...

5.1AI score0.00642EPSS
SaveExploits1References2
CVE
CVE
•added 2017/11/14 9:00 p.m.•67 views

CVE-2017-9394

The CVE-2017-9394 issue affects CA Identity Governance 12.6 and is a stored cross-site scripting vulnerability. The root cause is insufficient input validation that allows an authenticated remote attacker to display HTML or execute script in the context of another user. Affected product/component...

5.4CVSS5AI score0.00642EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•4 views

PT-2017-18892

Name of the Vulnerable Software and Affected Versions CA Identity Governance version 12.6 Description A stored cross-site scripting issue allows remote authenticated attackers to display HTML or execute script in the context of another user. Recommendations For CA Identity Governance version 12.6...

5.4CVSS0.00642EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/14 12:00 a.m.•5 views

CVE-2017-9394: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user...

5.4CVSS5.9AI score0.00642EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2017/11/13 12:00 a.m.•263 views

SUSE SLES12 Security Update : openssl (SUSE-SU-2017:2981-1)

This update for openssl fixes the following issues: Security issues fixed : - CVE-2017-3735: Malformed X.509 IPAdressFamily could cause OOB read bsc1056058 - adjust DEFAULTSUSE to meet 1.0.2 and current state bsc1027908 - out of bounds read+crash in DESfcrypt bsc1065363 - DEFAULTSUSE cipher list ...

5.3CVSS6.4AI score0.20968EPSS
SaveExploits0References9
OSV
OSV
•added 2017/11/10 12:09 p.m.•13 views

SUSE-SU-2017:2981-1 Security update for openssl

This update for openssl fixes the following issues: Security issues fixed: - CVE-2017-3735: Malformed X.509 IPAdressFamily could cause OOB read bsc1056058 - adjust DEFAULTSUSE to meet 1.0.2 and current state bsc1027908 - out of bounds read+crash in DESfcrypt bsc1065363 - DEFAULTSUSE cipher list i...

5.3CVSS6.1AI score0.20968EPSS
SaveExploits0References8
Openbugbounty
Openbugbounty
•added 2017/11/10 7:06 a.m.•12 views

ca-news.org XSS vulnerability

Open Bug Bounty ID: OBB-405438 Description| Value ---|--- Affected Website:| ca-news.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
CERT
CERT
•added 2017/11/02 12:00 a.m.•542 views

Savitech USB audio drivers install a new root CA certificate

Overview Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver package silently install a root CA certificate into the Windows trusted root certificate store. Description Savitech provides USB audio drivers for a number of specialized...

7.4CVSS7.3AI score0.01458EPSS
SaveExploits1References7
Cloud Foundry
Cloud Foundry
•added 2017/11/01 12:00 a.m.•29 views

USN-3432-1: ca-certificates update | Cloud Foundry

Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20170717 package. Affected Cloud Foundry Products and Versions Cloud Foundry BOSH...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/10/09 3:53 p.m.•11 views

businessportal.ca.gov XSS vulnerability

Open Bug Bounty ID: OBB-330908 Description| Value ---|--- Affected Website:| businessportal.ca.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2017/10/05 12:00 a.m.•16 views

Ubuntu: Security Advisory (USN-3432-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2017/10/03 12:00 a.m.•21 views

Ubuntu 14.04 LTS / 16.04 LTS : ca-certificates update (USN-3432-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3432-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20170717...

5.6AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2017/10/02 2:08 p.m.•53 views

USN-3432-1: ca-certificates update

The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20170717 package...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/10/02 12:00 a.m.•0 views

PT-2017-19404

Name of the Vulnerable Software and Affected Versions ca-certificates affected versions not specified Description The issue concerns outdated CA certificates in the ca-certificates package. An update refreshes the included certificates to those contained in the 20170717 package. Recommendations A...

5.8AI score
SaveExploits0References3
CNVD
CNVD
•added 2017/09/25 12:00 a.m.•16 views

CA Identity Manager Information Disclosure Vulnerability

CA Identity Manager is a user identity management solution. An information disclosure vulnerability exists in CA Identity Manager. A remote attacker can exploit this vulnerability to obtain passwords for locked accounts via exhaustive search...

9.8CVSS6.3AI score0.01684EPSS
SaveExploits0References1
zdt
zdt
•added 2017/09/23 12:00 a.m.•67 views

WordPress Responsive Image Gallery 1.1.8 SQL Injection Vulnerability

WordPress Responsive Image Gallery plugin version 1.1.8 suffers from a remote SQL injection vulnerability. ============================================= - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2017-14125 ===========================================...

7.5CVSS0.03189EPSS
SaveExploits3
Prion
Prion
•added 2017/09/22 2:29 p.m.•23 views

Code injection

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search...

5CVSS7.3AI score0.01684EPSS
SaveExploits0References2Affected Software2
NVD
NVD
•added 2017/09/22 2:29 p.m.•23 views

CVE-2017-9393

CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search...

9.8CVSS9.5AI score0.01684EPSS
SaveExploits0References2
Rows per page
Query Builder