Lucene search
+L

29828 matches found

Vulnrichment
Vulnrichment
•added 2024/04/16 12:00 a.m.•19 views

CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

5.3CVSS5.6AI score0.00782EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/04/16 12:00 a.m.•34 views

CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

5.3CVSS6.2AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2024/03/27 4:15 a.m.•16 views

CVE-2023-40290

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows...

8.3CVSS5.8AI score0.00698EPSS
SaveExploits0References4
NVD
NVD
•added 2024/03/27 4:15 a.m.•34 views

CVE-2023-40290

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows...

8.3CVSS6AI score0.00698EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/03/27 4:15 a.m.•27 views

CVE-2023-40290

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows...

8.3CVSS5.8AI score0.00698EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/27 12:00 a.m.•87 views

CVE-2023-40290

The Supermicro X11 series server motherboards (specifically X11SSM-F , X11SAE-F , and X11SSE-F running version 1.66 ) are vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is a lack of protective measures for the web page structure within the BMC IPMI web interface, which allows a...

8.3CVSS6.1AI score0.00698EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•9 views

CVE-2023-40290: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows...

8.3CVSS5.7AI score0.00698EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/27 12:00 a.m.•14 views

CVE-2023-40290

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows...

6.2AI score0.00698EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/03/27 12:00 a.m.•59 views

CVE-2023-40290

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows...

6AI score0.00698EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•66 views

PT-2024-22281 · Easyrange · Easyrange

Name of the Vulnerable Software and Affected Versions: EasyRange Ver 1.41 Description: The issue with the executable file search path when displaying an extracted file on Explorer may lead to loading an executable file that resides in the same folder where the extracted file is placed. If this...

7.8CVSS7.4AI score0.00188EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•8 views

CVE-2024-28131: Uncontrolled Search Path Element

EasyRange Ver 1.41 contains an issue with the executable file search path when displaying an extracted file on Explorer, which may lead to loading an executable file resides in the same folder where the extracted file is placed. If this vulnerability is exploited, arbitrary code may be executed...

7.8CVSS6.2AI score0.00188EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2024/03/12 7:00 a.m.•386 views

March 12, 2024—KB5035857 (OS Build 20348.2340)

None None...

8.8CVSS7.2AI score0.16256EPSS
SaveExploits0
NVD
NVD
•added 2024/03/11 5:15 a.m.•22 views

CVE-2024-28823

Amazon AWS aws-js-s3-explorer aka AWS JavaScript S3 Explorer 1.0.0 allows XSS via a crafted S3 bucket name to index.html...

6.1CVSS5.5AI score0.00386EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/11 12:00 a.m.•92 views

CVE-2024-28823

The Amazon AWS aws-js-s3-explorer (also known as AWS JavaScript S3 Explorer ) version 1.0.0 is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is the improper neutralization of input during web page generation, which allows an attacker to execute unauthorized code by using a cra...

6.1CVSS5.6AI score0.00386EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/11 12:00 a.m.•17 views

CVE-2024-28823

Amazon AWS aws-js-s3-explorer aka AWS JavaScript S3 Explorer 1.0.0 allows XSS via a crafted S3 bucket name to index.html...

5.8AI score0.00386EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/11 12:00 a.m.•9 views

CVE-2024-28823: Improper Neutralization of Input During Web Page Generation

Amazon AWS aws-js-s3-explorer aka AWS JavaScript S3 Explorer 1.0.0 allows XSS via a crafted S3 bucket name to index.html...

6.1CVSS5.7AI score0.00386EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/03/11 12:00 a.m.•36 views

CVE-2024-28823

Amazon AWS aws-js-s3-explorer aka AWS JavaScript S3 Explorer 1.0.0 allows XSS via a crafted S3 bucket name to index.html...

5.6AI score0.00386EPSS
SaveExploits0References2
Penetration Testing Lab
Penetration Testing Lab
•added 2024/03/05 7:54 a.m.•34 views

Persistence – Explorer

Windows File Explorer is the is the graphical file management utility for the Windows operating system and the default desktop environment. Windows explorer was introduced… Continue reading - Persistence - Explorer...

7.4AI score
SaveExploits0
Penetration Testing Lab
Penetration Testing Lab
•added 2024/03/05 7:54 a.m.•35 views

Persistence – Explorer

Windows File Explorer is the is the graphical file management utility for the Windows operating system and the default desktop environment. Windows explorer was introduced… Continue reading - Persistence - Explorer...

7.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/02/29 8:33 a.m.•12 views

dcc.cosmicexplorer.org Cross Site Scripting vulnerability OBB-3861607

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder