Lucene search
+L

675 matches found

Cvelist
Cvelist
added 2022/04/09 4:26 p.m.28 views

CVE-2022-28363

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...

6.3AI score0.0492EPSS
SaveExploits3References3
CVE
CVE
added 2022/04/09 4:26 p.m.110 views

CVE-2022-28363

Reprise License Manager 14.2 is affected by a reflected cross-site scripting (XSS) vulnerability in the /goform/login_process endpoint, specifically the GET parameter username. No authentication is required. The issue allows arbitrary JavaScript execution in the victim’s browser, enabling potenti...

6.1CVSS6AI score0.0492EPSS
SaveIn wildExploits3References3Affected Software1
CNNVD
CNNVD
added 2022/04/09 12:00 a.m.7 views

Reprise Software Reprise License Manager 跨站脚本漏洞

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A security vulnerability exists in...

5.4CVSS5.4AI score0.00955EPSS
SaveExploits3References5
CNNVD
CNNVD
added 2022/04/09 12:00 a.m.10 views

Reprise Software Reprise License Manager 跨站脚本漏洞

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A cross-site scripting vulnerabilit...

6.1CVSS5.9AI score0.0492EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2022/04/09 12:00 a.m.7 views

PT-2022-18972 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 14.2 Description: The issue is a reflected cross-site scripting vulnerability XSS in the "/goform/login process" API endpoint, specifically in the username parameter via GET requests. No authentication is...

6.1CVSS6.2AI score0.0492EPSS
SaveExploits3References6
Cvelist
Cvelist
added 2022/04/09 12:00 a.m.34 views

CVE-2022-28365

Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostnames, system architecture, and...

5.4AI score0.09149EPSS
SaveExploits3References4
CVE
CVE
added 2022/04/09 12:00 a.m.127 views

CVE-2022-28365

Affected software: Reprise License Manager 14.2. Vulnerability: Information disclosure via a GET request to /goforms/rlminfo without authentication. Impact (as stated): Disclosed data includes software versions, process IDs, network configuration, hostnames, system architecture, and file/director...

5.3CVSS5.3AI score0.09149EPSS
SaveIn wildExploits3References4Affected Software1
CNNVD
CNNVD
added 2022/04/09 12:00 a.m.8 views

Reprise Software Reprise License Manager 跨站脚本漏洞

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A security vulnerability exists in...

5.3CVSS5.7AI score0.09149EPSS
SaveExploits3References6
Positive Technologies
Positive Technologies
added 2022/04/09 12:00 a.m.5 views

PT-2022-18973 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 14.2 Description: The issue is a reflected cross-site scripting vulnerability XSS in the "/goform/rlmswitchr process" file parameter via GET. Authentication is required to exploit this issue. Recommendations: F...

5.4CVSS6AI score0.00955EPSS
SaveExploits3References7
zdt
zdt
added 2022/04/08 12:00 a.m.400 views

Reprise License Manager 14.2 Cross Site Scripting / Information Disclosure Vulnerabilities

Multiple Vulnerabilities in Reprise License Manager 14.2 Credit: Giulia Melotti Garibaldi ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Product:...

6.1CVSS5.5AI score0.09149EPSS
SaveExploits5
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.25 views

WordPress License Manager for WooCommerce plugin <= 2.2.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress License Manager for WooCommerce plugin versions = 2.2.5. Solution Update the WordPress License Manager for WooCommerce plugin to the latest available version at least 2.2.6...

2.5AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.17 views

WordPress License Manager for WooCommerce plugin <= 2.2.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress License Manager for WooCommerce plugin versions = 2.2.5. Solution Update the WordPress License Manager for WooCommerce plugin to the latest available version at least 2.2.6...

4.1AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.14 views

The vulnerability of the SafeNet Sentinel LDK License Manager lies in the improper handling of the link before accessing the file. This allows attackers to escalate their privileges and execute malicious DLLs.

The vulnerability of the SafeNet Sentinel LDK License Manager is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a attacker to enhance their privileges and execute malicious DLLs...

7.8CVSS7.3AI score0.00423EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2022/01/26 12:00 a.m.62 views

FlexNet Unauthorized Access Vulnerability

An unauthorized access vulnerability exists in FlexNet 2020 R2.5 and prior versions of FlexNet, a software license manager from Flexera, Inc. of Chicago, USA. An attacker could exploit this vulnerability to modify other restricted files after passing local authentication...

5.5CVSS5.1AI score0.00226EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/17 12:00 a.m.53 views

Reprise Software Reprise License Manager Cross-Site Scripting Vulnerability

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications.Reprise Software Reprise License...

6.1CVSS2.1AI score0.03241EPSS
SaveExploits3References1
NVD
NVD
added 2022/01/13 7:15 p.m.34 views

CVE-2021-45422

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. No authentication is required...

6.1CVSS0.03241EPSS
SaveExploits3References3
OSV
OSV
added 2022/01/13 7:15 p.m.10 views

CVE-2021-45422

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. No authentication is required...

6.1CVSS6.3AI score0.03241EPSS
SaveExploits3References4
Prion
Prion
added 2022/01/13 7:15 p.m.25 views

Cross site scripting

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. No authentication is required...

4.3CVSS6.1AI score0.03241EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2022/01/13 6:15 p.m.92 views

CVE-2021-45422

Affected software: Reprise License Manager (RLM) 14.2. Vulnerability: reflected cross-site scripting (XSS) in the /goform/activate_process endpoint, via the count parameter in GET requests. Root cause: improper validation of user-controlled data leading to client-side code execution. Impact: coul...

6.1CVSS6.1AI score0.03241EPSS
SaveIn wildExploits3References3Affected Software1
Cvelist
Cvelist
added 2022/01/13 6:15 p.m.27 views

CVE-2021-45422

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. No authentication is required...

6.3AI score0.03241EPSS
SaveExploits3References3
Rows per page
Query Builder