Lucene search
+L

12977 matches found

Github Security Blog
Github Security Blog
added 2024/12/23 8:15 p.m.20 views

Cross Site Scripting (XSS) vulnerability while uploading content to a new deployment

A vulnerability was found in the WildFly management console. A user may perform cross-site scripting in the deployment system. An attacker or insider may execute a malicious payload which could trigger an undesired behavior against the server. Impact Cross-site scripting XSS vulnerability in the...

6AI score
SaveExploits0References4Affected Software1
NVD
NVD
added 2024/12/23 1:15 a.m.23 views

CVE-2024-47864

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...

5.3CVSS0.0058EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/23 12:18 a.m.9 views

CVE-2024-47864

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...

5.3CVSS5.7AI score0.0058EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/23 12:18 a.m.84 views

CVE-2024-47864

The CVE-2024-47864 issue affects Sharp home 5G HR02, Wi‑Fi STATION SH‑52B, and SH‑54C. It is a buffer overflow in the hidden debug function that can cause the product’s web console to go down. Evidence across multiple sources confirms the affected models and the vulnerability class, but explicit ...

5.3CVSS7.9AI score0.0058EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/23 12:18 a.m.27 views

CVE-2024-47864

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...

5.3CVSS0.0058EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/23 12:00 a.m.18 views

PT-2024-32856 · Unknown · Home 5G Hr02 +2

Name of the Vulnerable Software and Affected Versions: home 5G HR02 affected versions not specified Wi-Fi STATION SH-52B affected versions not specified Wi-Fi STATION SH-54C affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the hidden debug...

5.3CVSS7.7AI score0.0058EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/12/23 12:00 a.m.14 views

PT-2024-40113 · Red Hat · Wildfly Management Console

Name of the Vulnerable Software and Affected Versions: WildFly management console affected versions not specified Description: A cross-site scripting issue was found in the WildFly management console, specifically in the deployment system, allowing a user to perform cross-site scripting. This cou...

6.9CVSS6.2AI score
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/23 12:00 a.m.14 views

Sharp HR02、Sharp SH-52B和Sharp SH-54C 安全漏洞

Sharp HR02 and others are products of Sharp Corporation, Japan.Sharp HR02 is a home router.Sharp SH-52B is a wireless LAN connectivity station.Sharp SH-54C is a wireless LAN connectivity station. A security vulnerability exists in the Sharp HR02, Sharp SH-52B, and Sharp SH-54C. A remote attacker...

5.3CVSS5.7AI score0.0058EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/22 12:00 a.m.7 views

PT-2024-17782 · Unknown · Treasurehuntgame Treasurehunt

Name of the Vulnerable Software and Affected Versions: TreasureHuntGame TreasureHunt up to 963e0e0 Description: A critical vulnerability has been found in TreasureHuntGame TreasureHunt. The issue affects the console log function of the file TreasureHunt/checkflag.php. The manipulation of the...

9.8CVSS7.3AI score0.00525EPSS
SaveExploits0References10
NVD
NVD
added 2024/12/20 9:15 p.m.25 views

CVE-2024-40875

There is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.52. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack...

5.9CVSS0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/20 8:17 p.m.13 views

CVE-2024-40875 Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52

There is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.52. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack...

5.9CVSS6.4AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/20 8:17 p.m.36 views

CVE-2024-40875 Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52

There is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.52. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack...

5.9CVSS0.00303EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/20 8:17 p.m.75 views

CVE-2024-40875

Absolute Secure Access management console (before 13.52) is affected by an XSS vulnerability. Attackers with system administrator privileges can interfere with another admin’s console session. Root cause is cross-site scripting in the console; impact is high on integrity, low on availability, non...

5.9CVSS5.9AI score0.00303EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/20 12:00 a.m.6 views

Absolute Secure Access 跨站脚本漏洞

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A cross-site scripting vulnerability exists in versions prior to Absolute Secure Access 13.52. An attacker exploiting this vulnerability could interfere...

5.9CVSS6AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/20 12:00 a.m.7 views

PT-2024-29125 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.52 Description: The issue is a cross-site scripting vulnerability in the management console. Attackers with system administrator permissions can interfere with another system administrator's use of...

5.9CVSS6.4AI score0.00303EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/20 12:00 a.m.9 views

PT-2024-9926 · Unknown · Skupper Console

Name of the Vulnerable Software and Affected Versions: Skupper console affected versions not specified Description: A flaw was found in the Skupper console, a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybr...

7.5CVSS7.4AI score0.00493EPSS
SaveExploits0References14
OSV
OSV
added 2024/12/19 6:15 p.m.8 views

CVE-2024-51471

IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size...

5.3CVSS6AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/19 6:15 p.m.7 views

CVE-2024-52897

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned...

6.2CVSS5.8AI score0.00209EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/19 5:18 p.m.85 views

CVE-2024-52897

CVE-2024-52897 affects IBM MQ web console. The IBM security bulletins describe that an attacker could obtain sensitive information when a detailed technical error message is returned. Affected: IBM MQ Appliance 9.3 LTS/CD and 9.4 LTS/CD (web console). Remediation/fix: apply the cumulative securit...

6.2CVSS6.1AI score0.00209EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/12/19 5:15 p.m.5 views

CVE-2024-52896

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned...

6.2CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder