Lucene search
+L

1574 matches found

CNNVD
CNNVD
added 2021/07/22 12:00 a.m.8 views

CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

6.1CVSS5.9AI score0.00872EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/07/22 12:00 a.m.10 views

CASAP Automated Enrollment SQL注入漏洞

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

9.8CVSS6.3AI score0.01536EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/07/22 12:00 a.m.10 views

CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system from the CASAP organization. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve. A security vulnerability exists...

6.1CVSS5.9AI score0.00872EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/07/22 12:00 a.m.9 views

CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system from the CASAP organization. The goal of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easily retrievable. SourceCodester CASAP Automated...

6.1CVSS5.4AI score0.00838EPSS
SaveExploits1References3
Citrix
Citrix
added 2021/07/14 12:00 a.m.11 views

How to Block MDM Profile Removal on Apple Device Enrollment Program (DEP) devices

By enabling the following setting, Citrix Endpoint Management administrators will be able to prevent users from removing the Mobile Device Management profile from Apple Device Enrollment Program DEP devices...

6.6AI score
SaveExploits0
CNNVD
CNNVD
added 2021/07/08 12:00 a.m.8 views

Samsung KCS授权问题漏洞

Samsung KCS is a Knox cloud service from Samsung in South Korea. A security vulnerability exists in KCS versions prior to 1.39, which stems from an improper MDM policy management vulnerability in the KME module that can be exploited by an attacker to bypass Knox Manage authentication...

7.5CVSS5.7AI score0.00922EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/25 12:00 a.m.9 views

SQL Injection Vulnerability in Waychar Enrollment System (CNVD-2021-47132)

Waychar is a free, full-featured open enrollment system. The Waychar enrollment system suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2021/06/25 12:00 a.m.13 views

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-47136)

Waychar is a free, full-featured open enrollment system. The Waychar enrollment system suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

7.4AI score
SaveExploits0
Metasploit
Metasploit
added 2021/06/17 12:00 a.m.1016 views

Misconfigured Certificate Template Finder

This module allows users to query a LDAP server for vulnerable certificate templates and will print these certificates out in a table along with which attack they are vulnerable to and the SIDs that can be used to enroll in that certificate template. Additionally the module will also print out a...

5.5AI score
SaveExploits0
CNNVD
CNNVD
added 2021/06/11 12:00 a.m.8 views

Nextcloud 信任管理问题漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud, which stems from the vulnerability of the Nextcloud desktop client prior to 3.3.1 to incorrect certificate...

5.9CVSS5.6AI score0.01031EPSS
SaveExploits1References8
OSV
OSV
added 2021/05/11 2:15 p.m.9 views

CVE-2021-21990

VMware Workspace one UEM console 2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to 20.11.0.27, 2010 prior to 20.10.0.16,2008 prior to 20.8.0.28, 2007 prior to 20.7.0.14,2006 prior to 20.6.0.19, 2005 prior to 20.5.0.46, 2004 prior to 20.4.0.21, 2003 prior to 20.3.0.23, 2001 prior to...

6.1CVSS6.3AI score0.00796EPSS
SaveExploits1References2
Prion
Prion
added 2021/05/11 2:15 p.m.18 views

Cross site scripting

VMware Workspace one UEM console 2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to 20.11.0.27, 2010 prior to 20.10.0.16,2008 prior to 20.8.0.28, 2007 prior to 20.7.0.14,2006 prior to 20.6.0.19, 2005 prior to 20.5.0.46, 2004 prior to 20.4.0.21, 2003 prior to 20.3.0.23, 2001 prior to...

4.3CVSS5.9AI score0.00796EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/05/11 12:00 a.m.14 views

Vmware Workspace One 跨站脚本漏洞

Vmware Vmware Workspace One is a platform for supporting cross-device applications for rapid delivery and management of applications from Vmware, USA. The platform, which includes VMware Horizon and VMware Horizon Cloud, integrates access control, application management, and multi-platform endpoi...

6.1CVSS6.2AI score0.00796EPSS
SaveExploits1References4
VMware
VMware
added 2021/05/11 12:00 a.m.38 views

VMware Workspace ONE UEM console patches address a cross-site scripting vulnerability (CVE-2021-21990)

3. Cross Site Scripting XSS vulnerability in VMware Workspace ONE UEM console CVE-2021-21990 VMware Workspace ONE UEM console does not validate an incoming request during device enrollment.VMware has evaluated the severity of this issue to be in the low severity range with a maximum CVSSv3 base...

4.3CVSS6.1AI score0.00796EPSS
SaveExploits1References19Affected Software1
CNVD
CNVD
added 2021/05/08 12:00 a.m.7 views

CASAP Automated Enrollment Cross-Site Scripting Vulnerability (CNVD-2021-33521)

CASAP Automated Enrollment is an automated enrollment system organized by CASAP USA. The purpose of the project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient and easily retrievable. A cross-site scripting...

5.4CVSS5.7AI score0.00614EPSS
SaveExploits1References1
NVD
NVD
added 2021/04/15 12:15 p.m.18 views

CVE-2021-27129

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

5.4CVSS0.00614EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/15 12:15 p.m.12 views

CVE-2021-27129

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

5.4CVSS6AI score0.00614EPSS
SaveExploits1References2
Prion
Prion
added 2021/04/15 12:15 p.m.20 views

Cross site scripting

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

3.5CVSS5.3AI score0.00614EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/04/15 11:15 a.m.51 views

CVE-2021-27129

The CVE-2021-27129 entry concerns the CASAP Automated Enrollment System version 1.0, which has a cross-site scripting (XSS) vulnerability via the Students > Edit > ROUTE parameter. The affected component is the web application; the root cause is input handling of the ROUTE parameter leading...

5.4CVSS5.3AI score0.00614EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/04/15 11:15 a.m.23 views

CVE-2021-27129

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

5.5AI score0.00614EPSS
SaveExploits1References2
Rows per page
Query Builder