Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5214 matches found

Cvelist
Cvelist•added 2022/05/11 4:10 p.m.•35 views

CVE-2022-22320

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218367...

4.8CVSS5AI score0.00453EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2022/05/11 4:10 p.m.•29 views

CVE-2021-39059

IBM Jazz Foundation IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

5.4CVSS5.3AI score0.00461EPSS
SaveExploits0References2
OSV
OSV•added 2022/05/10 4:15 p.m.•6 views

CVE-2021-39024

IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

6.1CVSS5.4AI score0.00375EPSS
SaveExploits0References2
NVD
NVD•added 2022/05/10 4:15 p.m.•31 views

CVE-2021-39024

IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

6.1CVSS0.00375EPSS
SaveExploits0References2
Prion
Prion•added 2022/05/10 4:15 p.m.•20 views

Cross site scripting

IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

4.3CVSS5.7AI score0.00375EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2022/05/10 3:45 p.m.•42 views

CVE-2021-39024

IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

4.8CVSS5.9AI score0.00375EPSS
SaveExploits0References2
CVE
CVE•added 2022/05/10 3:45 p.m.•85 views

CVE-2021-39024

IBM Guardium Data Encryption (GDE) versions 4.0.0.0 and 5.0.0.0 are vulnerable to cross-site scripting via the Web UI, enabling arbitrary JavaScript in trusted sessions and potential credential disclosure. The IBM Security Bulletin summarizes the issue and references CVE-2021-39024, with CVSS v3....

6.1CVSS5.8AI score0.00375EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux•added 2022/05/10 2:05 p.m.•13 views

lynx: Disclosure of HTTP authentication credentials via SNI data

A flaw was found in the way lynx parsed URLs with userinfo part containing authentication credentials. These credentials were included in the Server Name Indication SNI TLS extension data and sent unencrypted during the TLS connection handshake. This could lead to exposure of authentication...

5.3CVSS5.7AI score0.04104EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB•added 2022/05/10 12:00 a.m.•6 views

CVE-2021-39059

IBM Jazz Foundation IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

5.4CVSS5.7AI score0.00461EPSS
SaveExploits0References3Affected Software1
OSV
OSV•added 2022/04/28 4:15 p.m.•7 views

CVE-2022-22322

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218370...

5.4CVSS5.7AI score0.00461EPSS
SaveExploits0References2
OSV
OSV•added 2022/04/28 4:15 p.m.•7 views

CVE-2022-22443

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440...

5.4CVSS5.4AI score0.00461EPSS
SaveExploits0References2
NVD
NVD•added 2022/04/28 4:15 p.m.•21 views

CVE-2022-22443

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440...

5.4CVSS0.00461EPSS
SaveExploits0References2
OSV
OSV•added 2022/04/28 4:15 p.m.•6 views

CVE-2022-22427

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720...

6.1CVSS5.7AI score0.00607EPSS
SaveExploits0References2
OSV
OSV•added 2022/04/28 4:15 p.m.•6 views

CVE-2021-38952

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408...

5.4CVSS5.4AI score0.00461EPSS
SaveExploits0References2
NVD
NVD•added 2022/04/28 4:15 p.m.•22 views

CVE-2021-38952

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408...

5.4CVSS0.00461EPSS
SaveExploits0References2
Prion
Prion•added 2022/04/28 4:15 p.m.•20 views

Cross site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408...

3.5CVSS5.2AI score0.00461EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/04/28 4:15 p.m.•15 views

Cross site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440...

3.5CVSS5.2AI score0.00461EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/04/28 4:15 p.m.•20 views

Cross site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720...

4.3CVSS5.7AI score0.00607EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/04/28 4:15 p.m.•24 views

Cross site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218370...

3.5CVSS5.2AI score0.00461EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2022/04/28 4:10 p.m.•25 views

CVE-2022-22443

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440...

5.4CVSS5.3AI score0.00461EPSS
SaveExploits0References2
Rows per page
Query Builder