Lucene search
+L

2662 matches found

attackerkb
attackerkb
•added 2022/05/16 2:15 p.m.•12 views

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

6.1CVSS5.8AI score0.02296EPSS
SaveExploits0References5
OSV
OSV
•added 2022/05/16 2:15 p.m.•19 views

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

6.1CVSS5.8AI score0.02296EPSS
SaveExploits0References2
NVD
NVD
•added 2022/05/16 2:15 p.m.•35 views

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

6.1CVSS0.02296EPSS
SaveExploits0References2
Prion
Prion
•added 2022/05/16 2:15 p.m.•36 views

Design/Logic Flaw

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

4.3CVSS5.9AI score0.02296EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/05/16 1:38 p.m.•50 views

CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

6.1AI score0.02296EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/16 1:38 p.m.•119 views

CVE-2022-30777

The CVE-2022-30777 issue affects Parallels H-Sphere 3.6.1713, where a Cross-Site Scripting (XSS) flaw exists in the index_en.php via the 'from' parameter. Exploitation could allow arbitrary script execution in the victim’s browser, potentially leading to session hijacking, defacement, or theft of...

6.1CVSS5.9AI score0.02296EPSS
SaveIn wildExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/05/16 12:00 a.m.•1 views

PT-2022-20311

Name of the Vulnerable Software and Affected Versions Parallels H-Sphere versions 3.6.2 through 3.6.1713 Description The issue allows for cross-site scripting XSS attacks via the index en.php file, specifically through a parameter. This type of attack can enable malicious scripts to be injected...

6.1CVSS0.02296EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/16 12:00 a.m.•3 views

CVE-2022-30777: Improper Neutralization of Input During Web Page Generation

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

6.1CVSS6.4AI score0.02296EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/05/16 12:00 a.m.•20 views

Parallels H-Sphere 跨站脚本漏洞

Parallels H-Sphere is a web-hosting automation control panel from Parallels, Inc. It is used for shared web hosting services. Parallels H-Sphere version 3.6.2 contains a cross-site scripting vulnerability that can be exploited by attackers to perform XSS via indexen.php in the parameters...

6.1CVSS5.8AI score0.02296EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/04/28 12:00 a.m.•66 views

Cisco TelePresence Collaboration Endpoint Software H.323 DoS (cisco-sa-ce-roomos-dos-c65x2Qf2)

According to its self-reported version, Cisco TelePresence Collaboration Endpoint Software is affected by a vulnerability in the packet processing functionality that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerabilit...

7.8CVSS7.7AI score0.01428EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/04/28 12:00 a.m.•65 views

Siemens PROFINET Stack Integrated on Interniche Stack Uncontrolled Resource Consumption (CVE-2022-25622)

A vulnerability has been identified in SIMATIC CFU DIQ All versions, SIMATIC CFU PA All versions, SIMATIC S7-1500 CPU family incl. related ET200 CPUs and SIPLUS variants All versions V2.0.0, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 H V6 C...

7.5CVSS7.1AI score0.00901EPSS
SaveExploits0References3
OSV
OSV
•added 2022/04/21 7:15 p.m.•13 views

CVE-2022-20783

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.5CVSS5.8AI score0.01428EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/21 7:15 p.m.•34 views

CVE-2022-20783

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.8CVSS0.01428EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/21 7:15 p.m.•39 views

Input validation

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.8CVSS7.5AI score0.01428EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2022/04/21 6:50 p.m.•11 views

CVE-2022-20783 Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.5CVSS7.1AI score0.01428EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/04/21 6:50 p.m.•41 views

CVE-2022-20783 Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.5CVSS7.8AI score0.01428EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/21 12:00 a.m.•6 views

CVE-2022-20783: Improper Validation of Specified Type of Input

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.8CVSS7.4AI score0.01428EPSS
SaveExploits0References3
Cisco
Cisco
•added 2022/04/20 4:00 p.m.•84 views

Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.5CVSS7.6AI score0.01428EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/04/15 12:00 a.m.•23 views

Asterisk SQL注入漏洞

Asterisk is a PBX system software that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols.Asterisk suffers from a SQL injection vulnerability that can be exploited by attackers to cause user-supplied data to create corrupt SQL queries or possibly SQL injections...

9.8CVSS6AI score0.07026EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2022/04/07 12:00 a.m.•85 views

RHEL 7 : RHV-H security update (redhat-virtualization-host) 4.3.22 (Important) (RHSA-2022:1263)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1263 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host...

9.8CVSS7.9AI score0.73188EPSS
SaveExploits7References27
Rows per page
Query Builder