CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1399 matches found

NVD•added 2014/03/24 2:20 p.m.•29 views

CVE-2013-7342

Cross-site scripting XSS vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.1 allows remote attackers to inject arbitrary web script or HTML via the callback parameter, a related issue to CVE-2013-7341...

4.3CVSS5.6AI score0.01474EPSS

SaveExploits1References2

NVD•added 2014/03/24 2:20 p.m.•40 views

CVE-2013-7343

Cross-site scripting XSS vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML by using URL encoding within the callback parameter name. NOTE: this vulnerability exists because of an incomplete fix fo...

4.3CVSS5.6AI score0.01486EPSS

SaveExploits1References2

Prion•added 2014/03/24 2:20 p.m.•29 views

Cross site scripting

4.3CVSS6AI score0.01486EPSS

SaveExploits2References2Affected Software1

Prion•added 2014/03/24 2:20 p.m.•25 views

Cross site scripting

4.3CVSS6AI score0.02405EPSS

SaveExploits1References2Affected Software1

UbuntuCve•added 2014/03/24 2:20 p.m.•42 views

CVE-2013-7342

4.3CVSS6AI score0.01474EPSS

SaveExploits1References3

OSV•added 2014/03/24 2:20 p.m.•17 views

UBUNTU-CVE-2013-7342

4.3CVSS5.9AI score0.01474EPSS

SaveExploits1References4

UbuntuCve•added 2014/03/24 2:20 p.m.•33 views

CVE-2013-7343

4.3CVSS6AI score0.01486EPSS

SaveExploits1References3

OSV•added 2014/03/24 2:20 p.m.•12 views

UBUNTU-CVE-2013-7343

4.3CVSS5.9AI score0.01486EPSS

SaveExploits1References4

CVE•added 2014/03/22 1:00 a.m.•66 views

CVE-2013-7342

CVE-2013-7342 describes an XSS vulnerability in Flowplayer’s Flash fallback (flowplayer.swf) used by Flowplayer HTML5 5.4.1, exploitable via the callback parameter. Several Nessus entries classify this as an unpatched issue for affected Linux distros, noting no vendor patch is available. Related ...

4.3CVSS5.7AI score0.01474EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2014/03/22 1:00 a.m.•46 views

CVE-2013-7343

5.5AI score0.01486EPSS

SaveExploits1References2

Cvelist•added 2014/03/22 1:00 a.m.•45 views

CVE-2013-7342

5.6AI score0.01474EPSS

SaveExploits1References2

CVE•added 2014/03/22 1:00 a.m.•70 views

CVE-2013-7343

CVE-2013-7343 describes a cross-site scripting (XSS) vulnerability in Flowplayer’s Flash fallback component, specifically in the flowplayer.swf used by Flowplayer HTML5 5.4.3. The issue allows remote attackers to inject arbitrary web script or HTML by abusing URL encoding within the name of the c...

4.3CVSS5.7AI score0.01486EPSS

SaveExploits1References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2014/03/22 12:00 a.m.•5 views

CVE-2013-7343: Improper Neutralization of Input During Web Page Generation

4.3CVSS6AI score0.01486EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2014/03/22 12:00 a.m.•3 views

CVE-2013-7342: Improper Neutralization of Input During Web Page Generation

4.3CVSS6AI score0.01474EPSS

SaveExploits1References2

ThreatPost•added 2014/01/22 9:15 a.m.•11 views

XSS Filter Bypass Bug Found in Chrome and Safari

There is a bug in the anti-cross site scripting filter in Chrome and Safari that enables an attacker to bypass the filter in some cases and use an XSS flaw on a given site to compromise visitors’s machines. The vulnerability is fairly simple to exploit and a researcher has posted proof-of-concept...

5.8AI score

SaveExploits0References3

seebug.org•added 2013/12/17 12:00 a.m.•35 views

FlashCanvas 'proxy.php'跨站脚本漏洞

Bugtraq ID:64251 CVE ID:CVE-2013-6880 FlashCanvas是一个JavaScript库，可使Internet Explorer支持HTML5 Canvas。 FlashCanvas 'proxy.php'脚本不充分校验Referer Header数据，允许远程攻击者利用漏洞提交特制的GET请求，可获取敏感信息或劫持用户会话。 0 FlashCanvas 1.5 厂商补丁： FlashCanvas ----- FlashCanvas 1.6已经修复该漏洞，请到厂商的主页下载： http://flashcanvas.net/...

6.5AI score0.0138EPSS

SaveExploits2

Mozilla•added 2013/12/10 12:00 a.m.•54 views

Character encoding cross-origin XSS attack — Mozilla

Security researcher Masato Kinugawa discovered that if a web page is missing character set encoding information it can inherit character encodings across navigations into another domain from an earlier site. Only same-origin inheritance is allowed according to the HTML5 specification. This issue...

4.3CVSS2.3AI score0.03402EPSS

SaveExploits1References2Affected Software2

Kitploit•added 2013/12/05 2:15 a.m.•39 views

[Wapiti 2.3.0] Web Application Vulnerability Scanner

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti act...

7.9AI score

SaveExploits0

myhack58•added 2013/11/22 12:00 a.m.•60 views

Use the csrf vulnerability to upload files-the vulnerability warning-the black bar safety net

Everyone knows that the commonly used csrf to upload a file is not very simple. The problem is that we create a fake form submission data with browser file upload to submit the data a little different. That is the upload request will have a filename parameter: -----------------------------2 5 6 6...

7.2AI score

SaveExploits0

ThreatPost•added 2013/11/19 3:24 p.m.•42 views

Exploit Kit Adds Vector for Silverlight Vulnerability

Developers behind the Angler Exploit Kit have apparently added a new exploit over the last week that leverages a known vulnerability in Microsoft’s Silverlight browser framework. Silverlight, similar to Adobe Flash, is Microsoft’s plug-in for streaming media on browsers and is perhaps most known...

9.3CVSS7.4AI score0.99945EPSS

SaveExploits41References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by