Lucene search
+L

3979 matches found

CNNVD
CNNVD
•added 2020/12/18 12:00 a.m.•19 views

Solarwinds WebHelpDesk 跨站脚本漏洞

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "name" field of a user account...

5.4CVSS5.9AI score0.01488EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/18 12:00 a.m.•4 views

CVE-2019-16955: Improper Neutralization of Input During Web Page Generation

SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...

5.4CVSS5.7AI score0.01676EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/18 12:00 a.m.•4 views

CVE-2020-27340: Undefined Security Weakness

The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control...

6.1CVSS5.8AI score0.00816EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/18 12:00 a.m.•3 views

CVE-2019-16957: Improper Neutralization of Input During Web Page Generation

SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account...

5.4CVSS5.8AI score0.01488EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2020/12/18 12:00 a.m.•19 views

Solarwinds WebHelpDesk 跨站脚本漏洞

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via an SVG document uploaded in a...

5.4CVSS5.9AI score0.01676EPSS
SaveExploits1References4
Qualys Blog
Qualys Blog
•added 2020/12/14 4:04 p.m.•32 views

Support Live Chat

In more than 4 months since Qualys launched Support Live Chat on the Customer Support Portal, we’ve seen customers use it successfully to get answers to quick support questions. Based on its success, we are scaling internal processes to accommodate greater usage, and we encourage all customers to...

7.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/12/09 12:00 a.m.•32 views

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3415-1)

This update for xen fixes the following issues : Security issue fixed : CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issue fixed : Adjusted help for --maxiters, default is 5 bsc1177950. Note that Tenable Network Security has...

4.4CVSS6.3AI score0.00398EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2020/12/05 11:30 a.m.•167 views

Obfuscator - The Program Is Designed To Obfuscate The Shellcode

The program is designed to obfuscate the shellcode. Currently the tool supports 2 encryption. 1 XOR 2 AES The tool accepts shellcode in 4 formats. 1 base64 2 hex 3 c 4 raw Command Line Usage Usage Description ----- ----------- /f Specify the format of the shellcode base64 hex c raw /enc Specify t...

7.2AI score
SaveExploits0References1
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•15 views

SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73322)

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to inject arbitrary web script or HTML via a "location name"...

5.4CVSS5.9AI score0.01174EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/01 6:15 p.m.•20 views

CVE-2019-16958

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

5.4CVSS5.2AI score0.01174EPSS
SaveExploits1References2
OSV
OSV
•added 2020/12/01 6:15 p.m.•18 views

CVE-2019-16958

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

5.4CVSS5.9AI score0.01174EPSS
SaveExploits1References2
Prion
Prion
•added 2020/12/01 6:15 p.m.•22 views

Cross site scripting

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

3.5CVSS5.2AI score0.01174EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2020/12/01 5:57 p.m.•72 views

CVE-2019-16958

CVE-2019-16958 is a cross-site scripting (XSS) vulnerability reported in SolarWinds Web Help Desk 12.7.0 that allows an attacker to inject arbitrary web script or HTML via the Location Name field. The connected sources (Red Hat, CNVD, CVE listings, etc.) concur on the affected product and issue t...

5.4CVSS5.2AI score0.01174EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/12/01 5:57 p.m.•44 views

CVE-2019-16958

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

5.2AI score0.01174EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2020/12/01 12:00 a.m.•18 views

Desk 跨站脚本漏洞

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to inject arbitrary web script or HTML via a "location name"...

5.4CVSS6AI score0.01174EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/01 12:00 a.m.•6 views

CVE-2019-16958: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

5.4CVSS5.9AI score0.01174EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/11/30 12:00 a.m.•58 views

openSUSE Security Update : rclone (openSUSE-2020-2008)

This update for rclone fixes the following issues : rclone was updated to version 1.53.3 : - Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...

7.5CVSS7.5AI score0.01364EPSS
SaveExploits1References3
OSV
OSV
•added 2020/11/26 11:24 p.m.•11 views

OPENSUSE-SU-2020:2057-1 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Major batch refactor of ceph-volume that addresses a couple of issues bsc1151612, bsc1158257 - Documented Prometheus' security model bsc1169134 - monclient: Fixed an issue whe...

8.8CVSS8.8AI score0.01034EPSS
SaveExploits0References11
OSV
OSV
•added 2020/11/26 1:48 p.m.•6 views

OPENSUSE-SU-2020:2030-1 Security update for xen

This update for xen fixes the following issues: Security issue fixed: - CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issues fixed: - Updated to Xen 4.12.4 bug fix release bsc1027519. - Fixed a panic during MSI cleanup on AMD...

4.4CVSS5.4AI score0.00398EPSS
SaveExploits0References5
OSV
OSV
•added 2020/11/19 11:46 a.m.•8 views

SUSE-SU-2020:3416-1 Security update for xen

This update for xen fixes the following issues: Security issue fixed: - CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issue fixed: - Adjusted help for --maxiters, default is 5 bsc1177950...

4.4CVSS5.5AI score0.00398EPSS
SaveExploits0References4
Rows per page
Query Builder