Lucene search
+L

2334 matches found

CNVD
CNVD
•added 2025/10/21 12:00 a.m.•13 views

Unspecified Vulnerability in IBM Aspera Faspex

IBM Aspera Faspex is an International Business Machines IBM solution for rapid global person-to-person document delivery and collaboration. A security vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.13.1 that stems from a cross-domain policy file containing domains that shoul...

5.3CVSS6.8AI score0.00224EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/10 2:26 p.m.•12 views

CVE-2023-37401

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted...

5.3CVSS6.7AI score0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/10 8:55 a.m.•5 views

CVE-2025-52655 HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.

Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure...

3.1CVSS6.8AI score0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/10 8:55 a.m.•22 views

CVE-2025-52655

CVE-2025-52655 affects HCL MyXalytics 6.6. The flaw is inclusion of functionality from an untrusted control sphere, allowing loading of third‑party scripts without integrity checks or validation. This can cause external code to run in the application's context, risking data exposure. Exploitation...

3.1CVSS6.8AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/10 8:55 a.m.•27 views

CVE-2025-52655 HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.

Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure...

3.1CVSS0.00188EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/09 2:15 p.m.•14 views

CVE-2023-37401

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted...

5.3CVSS5.5AI score0.00224EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/09 2:15 p.m.•16 views

CVE-2023-37401

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted...

5.3CVSS0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/09 1:54 p.m.•17 views

EUVD-2023-41302

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted...

5.3CVSS6.2AI score0.00224EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/09 1:54 p.m.•32 views

CVE-2023-37401

IBM Aspera Faspex 5.0.0–5.0.13.1 is affected by CVE-2023-37401 due to a cross-domain policy file that includes domains that should not be trusted. The issue is documented across multiple feeds, which identify the affected versions and the root cause as a permissive cross-domain policy. Remediatio...

5.3CVSS6.3AI score0.00224EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/09 1:54 p.m.•6 views

CVE-2023-37401 IBM Aspera Faspex cross-origin resource sharing

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted...

5.3CVSS6.3AI score0.00224EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•12 views

IBM Aspera Faspex 安全漏洞

IBM Aspera Faspex is an International Business Machines IBM solution for rapid global person-to-person document delivery and collaboration. A security vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.13.1 that stems from a cross-domain policy file containing domains that shoul...

5.3CVSS6.5AI score0.00224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•0 views

CVE-2023-37401: Permissive Cross-domain Policy with Untrusted Domains

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted...

5.3CVSS5.7AI score0.00224EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•17 views

PT-2025-41382

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex versions 5.0.0 through 5.0.13.1 Description The software utilizes a cross-domain policy file that includes domains that should not be trusted. This could potentially allow for unauthorized access or data manipulation...

5.3CVSS6.3AI score0.00224EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/07 6:09 a.m.•30 views

CVE-2025-11304

A flaw has been found in CodeCanyon/ui-lib Mentor LMS up to 1.1.1. Affected by this vulnerability is an unknown functionality of the component API. Executing manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been...

7.5CVSS6.4AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2011-0712

Malware in sbrugna...

9.3CVSS6.1AI score0.06582EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-10074

Malware in sbrugna...

4.7CVSS7AI score0.02175EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2007-3467

Malware in sbrugna...

7.8CVSS6.3AI score0.01502EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-0521

Malware in sbrugna...

5.8CVSS6.1AI score0.10565EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-6969

Malware in sbrugna...

7.8CVSS6.4AI score0.01413EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2006-6973

Malware in sbrugna...

7.8CVSS6.4AI score0.01413EPSS
SaveExploits0References2
Rows per page
Query Builder