Lucene search
+L

3 matches found

BDU FSTEC
BDU FSTEC
•added 2022/11/21 12:00 a.m.•37 views

The vulnerability in the overwrite.config.php implementation: The $domain parameter of the web application for data synchronization with ownCloud allows attackers to perform spoofing attacks.

The vulnerability of the overwrite.config.php script, where $domain is used for the web application’s data synchronization with ownCloud, is related to configuration errors when processing the OWNCLOUDDOMAIN variable. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

5.3CVSS5.9AI score0.00344EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2013/11/09 1:00 a.m.•35 views

CVE-2013-3985

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

6.3AI score0.00532EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/11/09 12:00 a.m.•4 views

CVE-2013-3985: Undefined Security Weakness

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable...

2.9CVSS5.9AI score0.00532EPSS
SaveExploits0References2
Rows per page
Query Builder