Lucene search
K

59 matches found

Vulnrichment
Vulnrichment
added 2024/02/02 1:7 p.m.13 views

CVE-2023-6676 Cross Site Request Forgery in National Keep's CyberMath

Cross-Site Request Forgery CSRF vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery. This issue affects CyberMath: from v1.4 before v1.5...

8.8CVSS7.3AI score0.00131EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/02 1:7 p.m.12 views

CVE-2023-6676 Cross Site Request Forgery in National Keep's CyberMath

Cross-Site Request Forgery CSRF vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery. This issue affects CyberMath: from v1.4 before v1.5...

8.8CVSS8.9AI score0.00131EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/02 12:57 p.m.11 views

CVE-2023-6675 Malicious File Upload in National Keep's CyberMath

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5...

9.8CVSS9.5AI score0.00093EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/02 12:57 p.m.6 views

CVE-2023-6675 Malicious File Upload in National Keep's CyberMath

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5...

9.8CVSS7.3AI score0.00093EPSS
Exploits0References2
CVE
CVE
added 2024/02/02 12:57 p.m.35 views

CVE-2023-6675

CVE-2023-6675 affects National Keep CyberMath. The issue is an Unrestricted Upload of a File with a Dangerous Type in CyberMath versions 1.4 and earlier (pre-1.5), enabling an attacker to upload a web shell to the web server. The root cause is an improper validation of uploaded file types, allowi...

9.8CVSS7.3AI score0.00093EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/02/02 12:50 p.m.13 views

CVE-2023-6673 Reflected XSS in National Keep's CyberMath

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS. This issue affects CyberMath: from v.1.4 before v.1.5...

6.1CVSS6.5AI score0.00181EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/02 12:50 p.m.12 views

CVE-2023-6673 Reflected XSS in National Keep's CyberMath

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS. This issue affects CyberMath: from v.1.4 before v.1.5...

6.1CVSS6.4AI score0.00181EPSS
Exploits0References2
CVE
CVE
added 2024/02/02 12:50 p.m.42 views

CVE-2023-6673

The CVE-2023-6673 entry describes a Reflected XSS in CyberMath (National Keep Cyber Security Services) caused by improper input neutralization during web page generation. Affected version: CyberMath v1.4 prior to v1.5. Impact is cross-site scripting via reflected input; exploitation details are n...

6.1CVSS6.4AI score0.00181EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/02 12:42 p.m.12 views

CVE-2023-6672 Stored XSS in National Keep's CyberMath

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS. This issue affects CyberMath: from v1.4 before v1.5...

5.4CVSS6AI score0.00153EPSS
Exploits0References2
CVE
CVE
added 2024/02/02 12:42 p.m.43 views

CVE-2023-6672

The CVE-2023-6672 entry documents a Stored XSS in CyberMath (National Keep Cyber Security Services) caused by Improper Neutralization of Input During Web Page Generation in CyberMath versions 1.4 prior to 1.5. The issue arises from unsafe handling of input during web page rendering, enabling scri...

5.4CVSS6AI score0.00153EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/02/02 12:42 p.m.12 views

CVE-2023-6672 Stored XSS in National Keep's CyberMath

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS. This issue affects CyberMath: from v1.4 before v1.5...

5.4CVSS5.8AI score0.00153EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/02 12:0 a.m.2 views

National Keep CyberMath Cross-Site Scripting Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A cross-site scripting vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from improper input neutralization during web page generation, resulting in a reflected...

6.1CVSS6.2AI score0.00181EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/02 12:0 a.m.2 views

National Keep CyberMath Cross-Site Request Forgery Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A cross-site request forgery vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from vulnerability to cross-site request forgery CSRF attacks...

8.8CVSS6.7AI score0.00131EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/02 12:0 a.m.3 views

National Keep CyberMath Cross-Site Scripting Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A cross-site scripting vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from improper input neutralization during web page generation, resulting in a stored...

5.4CVSS6.1AI score0.00153EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/02 12:0 a.m.1 views

PT-2024-15042

Name of the Vulnerable Software and Affected Versions CyberMath versions 1.4 through 1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This affects the CyberMath software. Recommendations F...

5.4CVSS6.1AI score0.00153EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/02/02 12:0 a.m.2 views

PT-2024-15044

Name of the Vulnerable Software and Affected Versions CyberMath versions 1.4 through 1.4 Description The issue allows an unrestricted upload of a file with a dangerous type, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized access to the server...

9.8CVSS7.2AI score0.00093EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/02/02 12:0 a.m.3 views

PT-2024-15045 · Cybermath · Cybermath

Name of the Vulnerable Software and Affected Versions: CyberMath versions 1.4 through 1.4 Description: A Cross-Site Request Forgery CSRF issue affects CyberMath, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited by tricking a user into performing an...

8.8CVSS8.5AI score0.00131EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/02/02 12:0 a.m.2 views

PT-2024-15043

Name of the Vulnerable Software and Affected Versions CyberMath versions 1.4 through 1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This affects the CyberMath software. Recommendation...

6.1CVSS6.4AI score0.00181EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/02/02 12:0 a.m.2 views

National Keep CyberMath Code Issue Vulnerability

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A code issue vulnerability exists in National Keep CyberMath versions v1.4 through v1.5 that stems from the presence of an unrestricted upload of a dangerous type of file that allows a Web Shell to...

9.8CVSS7.1AI score0.00093EPSS
Exploits0References3
Rows per page
Query Builder