Lucene search
+L

1284 matches found

ATTACKERKB
ATTACKERKB
added 2021/04/01 10:15 p.m.3 views

CVE-2021-23925

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting XSS vulnerability in entries of type Document...

6.1CVSS6.2AI score0.00588EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/04/01 10:15 p.m.3 views

CVE-2021-23921

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

9.1CVSS7.2AI score0.00998EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/04/01 10:15 p.m.3 views

CVE-2021-23923

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

8.1CVSS7.2AI score0.00758EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/01 10:15 p.m.15 views

Authentication flaw

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

4.9CVSS8.1AI score0.00758EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/04/01 9:53 p.m.169 views

CVE-2021-23922

CVE-2021-23922 refers to a cross-site scripting (XSS) vulnerability in Devolutions Remote Desktop Manager (webviews) affecting versions prior to 2020.2.12 . The issue is documented across multiple sources (NVD/CNVD/CVE listings) with CVSS metrics indicating a network-exposed vulnerability, mitiga...

5.4CVSS5.3AI score0.01149EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/01 9:53 p.m.21 views

CVE-2021-23922

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting XSS vulnerability in webviews...

5.6AI score0.01149EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/01 9:50 p.m.274 views

CVE-2021-23925

Devolutions Server (prior to version 2020.3) contains a cross-site scripting (XSS) vulnerability in Document entries. The issue affects the Document-type data handling and allows injecting JavaScript code, as described across multiple CVE references (CVE-2021-23925) with CVSS v3.1 base score 6.1 ...

6.1CVSS6AI score0.00588EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/01 9:50 p.m.28 views

CVE-2021-23925

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting XSS vulnerability in entries of type Document...

6.2AI score0.00588EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/01 9:48 p.m.89 views

CVE-2021-23924

Summary: Devolutions Server prior to 2020.3 contains an information-disclosure vulnerability where diagnostic files expose sensitive data. Affected product: Devolutions Server (versions before 2020.3). Vulnerability: Exposure of sensitive information in diagnostic files. Root cause stated as info...

7.5CVSS7.3AI score0.00998EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/01 9:48 p.m.25 views

CVE-2021-23924

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

7.6AI score0.00998EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/01 9:46 p.m.24 views

CVE-2021-23921

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

9.4AI score0.00998EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/01 9:46 p.m.80 views

CVE-2021-23921

CVE-2021-23921 affects Devolutions Server prior to 2020.3. The issue is broken access control on Password List entry elements, as described in the CVE entry and corroborated by NVD/related records. The connected documents confirm the affected software and the underlying flaw (inadequate access re...

9.1CVSS9.1AI score0.00998EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/01 9:44 p.m.29 views

CVE-2021-23923

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

8.3AI score0.00758EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/01 9:44 p.m.83 views

CVE-2021-23923

The CVE concerns Devolutions Server prior to 2020.3 with a Broken Authentication issue involving Windows domain users. Public documents identify affected software and the vulnerability type but do not provide exploit details, exact root cause, or remediation steps within the supplied sources. Mon...

8.1CVSS8AI score0.00758EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/04/01 9:15 p.m.14 views

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

5.4CVSS0.01075EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/01 9:15 p.m.18 views

Cross site scripting

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

3.5CVSS5AI score0.01075EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/01 8:1 p.m.19 views

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

5.3AI score0.01075EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/01 8:1 p.m.80 views

CVE-2021-28047

CVE-2021-28047 affects Devolutions Remote Desktop Manager. The vulnerability is a Cross-Site Scripting (XSS) in Administration Reports present in versions prior to 2021.1, exploitable by a remote authenticated user who can inject arbitrary web script or HTML via multiple input fields. The connect...

5.4CVSS5.1AI score0.01075EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.7 views

Devolutions Remote Desktop Manager 跨站脚本漏洞

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in webviews in Devolutions Remote Desktop Manager versions prior to...

5.4CVSS5.3AI score0.01149EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.10 views

Devolutions Remote Desktop Manager 跨站脚本漏洞

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in the Administration Report in Devolutions Remote Desktop Manager...

5.4CVSS5.5AI score0.01075EPSS
SaveExploits0References2
Rows per page
Query Builder