Lucene search
+L

3495 matches found

Mend
Mend
•added 2017/04/12 10:00 p.m.•5 views

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

6.1CVSS0.01832EPSS
SaveExploits4References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/12 12:00 a.m.•7 views

CVE-2015-7562: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

6.1CVSS5.9AI score0.01832EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2017/04/12 12:00 a.m.•5 views

PT-2017-7226

Name of the Vulnerable Software and Affected Versions TeamPass versions 2.1.24 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the label value of an item or the name of a role. This can lead to cross-site scripting XSS attacks. Recommendations...

6.1CVSS0.01832EPSS
SaveExploits4References6
osv_cve
osv_cve
•added 2017/04/02 8:59 p.m.•17 views

CVE-2016-8797

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software...

7.5CVSS5.8AI score0.00874EPSS
SaveExploits0References1
NVD
NVD
•added 2017/04/02 8:59 p.m.•41 views

CVE-2016-8797

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software...

7.5CVSS7.5AI score0.00874EPSS
SaveExploits0References1
n0where
n0where
•added 2017/03/31 5:00 a.m.•52 views

OSINT Gathering Tool: Inquisitor

OSINT Gathering Tool Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to...

0.5AI score
SaveExploits0References1
Citrix
Citrix
•added 2017/03/30 12:00 a.m.•21 views

Concepts, Entities and Terms used for nFactor Authentication through NetScaler

nFactor is the new authentication framework that allows an administrator to configure complex authentication scenarios fairly easily. It reduces complexity through flexible and extensible authentication mechanisms. This framework could be used to configure all the authentication modes currently...

7.3AI score
SaveExploits0
osv_debian
osv_debian
•added 2017/03/24 3:59 p.m.•7 views

DEBIAN-CVE-2016-10146

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

7.5CVSS5.9AI score0.0508EPSS
SaveExploits0References1
Mend
Mend
•added 2017/03/24 3:00 p.m.•18 views

CVE-2016-10146

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

8.7CVSS0.0508EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/24 12:00 a.m.•5 views

CVE-2016-10146: Undefined Security Weakness

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

7.8CVSS5.7AI score0.0508EPSS
SaveExploits0References2
osv_alpine
osv_alpine
•added 2017/03/15 3:59 p.m.•18 views

ALPINE-CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

9.8CVSS7.8AI score0.06681EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2017/03/15 3:59 p.m.•15 views

DEBIAN-CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

9.8CVSS7.8AI score0.06681EPSS
SaveExploits1References1
seebug.org
seebug.org
•added 2017/03/06 12:00 a.m.•60 views

seacms search.php code execution vulnerability

function parseIf$content if strpos$content,'if:'=== false return $content; else $labelRule = buildregx"if:.? .? end if","is"; $labelRule2="elseif"; $labelRule3="else"; pregmatchall$labelRule,$content,$iar; $arlen=count$iar0; $elseIfFlag=false; for$m=0;$mparseStrIf$strIf; $strThen=$iar2$m;...

7.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2017/02/15 6:59 a.m.•16 views

CVE-2017-5990

An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP GET parameter passed to the "PhreeBooksERP-master/extensions/ShippingMethods/ups/labelmgr/jsinclude.php" and...

6.1CVSS6AI score0.01016EPSS
SaveExploits1References3
osv_alpine
osv_alpine
•added 2017/01/28 1:59 a.m.•12 views

ALPINE-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

9.8CVSS7.7AI score0.03172EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2017/01/27 12:00 a.m.•8 views

UBUNTU-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

9.8CVSS7.6AI score0.03172EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2017/01/04 12:00 a.m.•25 views

PowerDNS Recursor Label Decompression DoS Vulnerability (2015-01)

PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS6.8AI score0.78725EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2016/12/31 12:00 a.m.•12 views

PT-2016-3136 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to multiple memory leaks in the caption and label handling code, allowing remote attackers to cause a denial of service due to memory consumption via unspecified...

9.8CVSS6.2AI score0.06534EPSS
SaveExploits2References104
osv_ubuntu
osv_ubuntu
•added 2016/12/31 12:00 a.m.•17 views

UBUNTU-CVE-2016-10146

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service memory consumption via unspecified vectors...

7.5CVSS6.8AI score0.0508EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2016/12/31 12:00 a.m.•19 views

UBUNTU-CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

9.8CVSS7.8AI score0.06681EPSS
SaveExploits1References7
Rows per page
Query Builder