Lucene search
+L

1338 matches found

CNVD
CNVD
•added 2021/04/16 12:00 a.m.•18 views

SAP NetWeaver AS JAVA Content Spoofing Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A content spoofing vulnerability exists in SAP NetWeaver Application Server for Java versions 7.10, 7.11, 7.20,...

4.3CVSS6.6AI score0.00561EPSS
SaveExploits0References1
Hacker One
Hacker One
•added 2021/04/15 5:33 p.m.•34 views

Reddit: Content Spoofing

Vulnerability: Content Spoofing or Text Injection Description: This vulnerability will reflect text on to the web page which is used to scam a victim to visit or send information to a malicious website. Because it is inside the domain and trusted web page, there is chances of scam. Open the Url a...

6.8AI score
SaveExploits0
OSV
OSV
•added 2021/04/13 7:15 p.m.•19 views

CVE-2021-21492

SAP NetWeaver Application Server JavaHTTP Service, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled...

4.3CVSS6.1AI score0.00561EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/13 7:15 p.m.•32 views

CVE-2021-21492

SAP NetWeaver Application Server JavaHTTP Service, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled...

4.3CVSS0.00561EPSS
SaveExploits0References2
Prion
Prion
•added 2021/04/13 7:15 p.m.•38 views

Spoofing

SAP NetWeaver Application Server JavaHTTP Service, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled...

4.3CVSS4.7AI score0.00561EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/04/13 7:15 p.m.•10 views

CVE-2021-21492

SAP NetWeaver Application Server JavaHTTP Service, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled...

4.3CVSS6.3AI score0.00561EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2021/04/13 6:40 p.m.•97 views

CVE-2021-21492

SAP NetWeaver AS Java (HTTP Service) is affected by a content spoofing vulnerability (CVE-2021-21492) due to insufficient validation of the login group in URLs, enabling content spoofing when directory listings are enabled. Affected versions include 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. E...

4.3CVSS5AI score0.00561EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/04/13 6:40 p.m.•38 views

CVE-2021-21492

SAP NetWeaver Application Server JavaHTTP Service, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled...

4.3CVSS5.3AI score0.00561EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•2 views

PT-2021-14558

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java HTTP Service versions 7.10 through 7.50 Description The issue arises from insufficient validation of logon groups in URLs, leading to a content spoofing issue when directory listing is enabled...

4.3CVSS0.00561EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•17 views

SAP NetWeaver Application Server Java 安全漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A content spoofing vulnerability exists in SAP NetWeaver Application Server for Java versions 7.10, 7.11, 7.20,...

4.3CVSS5.6AI score0.00561EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/13 12:00 a.m.•6 views

CVE-2021-21492: Authentication Bypass by Spoofing

SAP NetWeaver Application Server JavaHTTP Service, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled...

4.3CVSS5.8AI score0.00561EPSS
SaveExploits0References3
ArchLinux
ArchLinux
•added 2021/03/25 12:00 a.m.•227 views

[ASA-202103-19] vivaldi: multiple issues

Arch Linux Security Advisory ASA-202103-19 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2020-27844 CVE-2021-21159 CVE-2021-21160 CVE-2021-21161 CVE-2021-21162 CVE-2021-21163 CVE-2021-21165 CVE-2021-21166 CVE-2021-21167 CVE-2021-21168 CVE-2021-21169...

8.8CVSS7.8AI score0.24027EPSS
SaveExploits26References77
Tenable Nessus
Tenable Nessus
•added 2021/03/15 12:00 a.m.•61 views

SUSE SLES12 Security Update : apache2 (SUSE-SU-2021:0779-1)

This update for apache2 fixes the following issues : Fixed potential content spoofing with default error pagesbsc118270 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and forma...

6.1CVSS6.8AI score0.81466EPSS
SaveExploits5References5
UbuntuCve
UbuntuCve
•added 2021/03/09 6:15 p.m.•33 views

CVE-2021-21176

Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

6.5CVSS7AI score0.01705EPSS
SaveExploits1References1
Veracode
Veracode
•added 2021/03/09 2:26 p.m.•37 views

Content Spoofing

chromium is vulnerable to content spoofing. An insecure access control allows an attacker who has compromised the renderer process to spoof contents of the Omnibox via a malicious HTML page...

6.5CVSS6.8AI score0.01599EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2021/03/09 2:26 p.m.•31 views

Content Spoofing

chromium is vulnerable to content spoofing. An insecure implementation allows an attacker who has compromised the renderer process to spoof contents of the Omnibox via a malicious HTML page...

6.5CVSS2.8AI score0.01705EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2021/03/09 2:26 p.m.•29 views

Content Spoofing

chromium is vulnerable to content spoofing. An attacker is able to send a malicious HTML page to spoof the contents of the Omnibox URL bar...

6.5CVSS1AI score0.01615EPSS
SaveExploits0References11Affected Software2
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•22 views

Microsoft SharePoint 输入验证错误漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...

5.8CVSS5.3AI score0.01463EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/03/03 12:00 a.m.•47 views

Google Chrome Security UI Incorrect Vulnerability (CNVD-2021-17296)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A security UI incorrectness vulnerability exists in TabStrip and Navigation in versions of Google Chrome prior to 89.0.4389.72. A remote attacker can exploit this...

6.5CVSS5.9AI score0.01659EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2021/02/09 2:55 p.m.•33 views

CVE-2021-21147

Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS5.7AI score0.00845EPSS
SaveExploits0
Rows per page
Query Builder