Lucene search
+L

1136 matches found

OSV
OSV
added 2024/01/31 1:15 p.m.8 views

CVE-2024-0589

Cross-site scripting XSS vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry...

5.4CVSS5.8AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/31 1:15 p.m.23 views

CVE-2024-0589

Cross-site scripting XSS vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry...

5.4CVSS5.3AI score0.00295EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/31 1:15 p.m.27 views

Cross site scripting

Cross-site scripting XSS vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry...

4.9CVSS6.1AI score0.00295EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/31 1:4 p.m.36 views

CVE-2024-0589

Cross-site scripting XSS vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry...

5.5AI score0.00295EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/31 12:0 a.m.7 views

Devolutions Remote Desktop Manager Cross-Site Scripting Vulnerability

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2023.3.36 and prior versions, which stems from the presence of a cross-site scripting XS...

5.4CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Circl
Circl
added 2024/01/16 4:7 p.m.10 views

CVE-2019-8194

creationtimestamp| type| source ---|---|--- 2024-01-16 16:07:30+00:00| seen| https://t.me/ctinow/168857 2025-08-31 03:01:32+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

7.5CVSS7.3AI score0.02893EPSS
SaveExploits0References1
Circl
Circl
added 2024/01/12 1:46 p.m.9 views

CVE-2023-46154

creationtimestamp| type| source ---|---|--- 2024-01-12 13:46:33+00:00| seen| https://t.me/ctinow/167240...

7.2CVSS7.6AI score0.00735EPSS
SaveExploits0References1
Circl
Circl
added 2024/01/09 9:6 a.m.11 views

CVE-2019-17629

creationtimestamp| type| source ---|---|--- 2024-01-09 09:06:59+00:00| seen| https://t.me/ctinow/164863...

4.8CVSS4.9AI score0.00541EPSS
SaveExploits1References1
NVD
NVD
added 2023/12/22 5:15 p.m.30 views

CVE-2023-49088

Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in version 1.2.25 is incomplete as it enables an adversary to have a victim browser execute malicious code when a victim user hovers their mouse over the malicious data source path in...

6.1CVSS0.01268EPSS
SaveExploits2References5
Prion
Prion
added 2023/12/22 5:15 p.m.33 views

Cross site scripting

Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in version 1.2.25 is incomplete as it enables an adversary to have a victim browser execute malicious code when a victim user hovers their mouse over the malicious data source path in...

4.3CVSS6.5AI score0.01268EPSS
SaveExploits2References3Affected Software1
AlpineLinux
AlpineLinux
added 2023/12/22 4:16 p.m.123 views

CVE-2023-49088

Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in version 1.2.25 is incomplete as it enables an adversary to have a victim browser execute malicious code when a victim user hovers their mouse over the malicious data source path in...

6.1CVSS7.3AI score0.01268EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2023/12/13 12:0 a.m.4 views

PT-2023-8820 · Apache · Apache Linkis

Name of the Vulnerable Software and Affected Versions: Apache Linkis versions =1.4.0 Description: The issue is related to insufficient protection of registration data in Apache Linkis, which may allow a remote attacker to gain unauthorized access to protected information. Specifically, when using...

7.8CVSS7.4AI score0.00901EPSS
SaveExploits0References11
NVD
NVD
added 2023/12/12 11:15 p.m.18 views

CVE-2023-3517

Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources...

8.8CVSS0.00642EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/12 11:15 p.m.17 views

Design/Logic Flaw

Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources...

6.5CVSS7.3AI score0.00642EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/12 3:15 p.m.6 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.8CVSS5.9AI score0.00725EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/12 3:15 p.m.31 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.8CVSS0.00725EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/12 3:15 p.m.17 views

Design/Logic Flaw

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

7.5CVSS7.7AI score0.00725EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/12 2:32 p.m.50 views

CVE-2023-6593

CVE-2023-6593 concerns a client-side permission bypass in Devolutions Remote Desktop Manager (iOS) 2023.3.4.0 and earlier. According to Red Hat and related sources, an attacker who has access to the application can execute entries in a SQL data source without restriction. The vulnerability is des...

9.8CVSS9.3AI score0.00725EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/12 2:32 p.m.13 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

7.7AI score0.00725EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/12 2:32 p.m.35 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.6AI score0.00725EPSS
SaveExploits0References1
Rows per page
Query Builder