Lucene search
+L

6139 matches found

Prion
Prion
•added 2021/04/19 4:15 p.m.•25 views

Design/Logic Flaw

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

3.5CVSS5.3AI score0.00604EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/04/19 3:45 p.m.•54 views

CVE-2020-28141

CVE-2020-28141 affects Online Discussion Forum 1.0. The vulnerability is a reflected/stored XSS in the message body: an authenticated attacker can send messages containing JavaScript to other users, which executes when those users view the messages page. Sources in the connected documents confirm...

5.4CVSS5.3AI score0.00604EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/19 3:45 p.m.•38 views

CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

5.4AI score0.00604EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/04/19 12:00 a.m.•7 views

PT-2021-11448

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum version 1.0 Description: The messaging subsystem is susceptible to a cross-site scripting XSS issue in the message body, allowing an authenticated user to send messages containing javascript code that executes when the...

5.4CVSS0.00604EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/19 12:00 a.m.•9 views

CVE-2020-28141: Improper Neutralization of Input During Web Page Generation

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

5.4CVSS6AI score0.00604EPSS
SaveExploits1References2
NVD
NVD
•added 2021/04/14 5:15 p.m.•26 views

CVE-2021-28826

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker...

8.8CVSS0.0023EPSS
SaveExploits0References2
Prion
Prion
•added 2021/04/14 5:15 p.m.•31 views

Design/Logic Flaw

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker wit...

7.2CVSS7.5AI score0.0023EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/04/14 4:20 p.m.•44 views

CVE-2021-28826 TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker...

8.8CVSS8.7AI score0.0023EPSS
SaveExploits0References2
CVE
CVE
•added 2021/04/14 4:20 p.m.•68 views

CVE-2021-28826

Summary (CVE-2021-28826) The Windows Installation component of TIBCO Messaging – Eclipse Mosquitto Distribution – Bridge (Community and Enterprise) is affected. Versions ≤ 1.3.0 are vulnerable due to a lack of access restrictions on certain files/folders, enabling a low-privileged local attacker ...

8.8CVSS7.7AI score0.0023EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2021/04/14 12:00 a.m.•17 views

Fedora: Security Advisory for mosquitto (FEDORA-2021-65100169e4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/04/14 12:00 a.m.•66 views

Microsoft Windows Multiple Vulnerabilities (KB5001335)

This host is missing a critical security update according to Microsoft KB5001335 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.06112EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•9 views

PT-2021-17947

Name of the Vulnerable Software and Affected Versions: TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition versions 1.3.0 and below TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition versions 1.3.0 and below Description: The Windows Installati...

8.8CVSS0.0023EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•8 views

PT-2021-17946

Name of the Vulnerable Software and Affected Versions: TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition versions 1.3.0 and below TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition versions 1.3.0 and below Description: The Windows Installation...

8.8CVSS0.0023EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•10 views

CVE-2021-28826: Incorrect Authorization

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker...

8.8CVSS6.1AI score0.0023EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•13 views

CVE-2021-28825: Incorrect Authorization

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker wit...

8.8CVSS6.1AI score0.0023EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/13 8:15 p.m.•23 views

CVE-2021-27089

Microsoft Internet Messaging API Remote Code Execution Vulnerability...

7.8CVSS0.0226EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/04/13 8:15 p.m.•12 views

CVE-2021-27089

Microsoft Internet Messaging API Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.0226EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/13 8:15 p.m.•15 views

CVE-2021-27089

Microsoft Internet Messaging API Remote Code Execution Vulnerability...

7.8CVSS7.5AI score0.0226EPSS
SaveExploits0References2Affected Software26
Prion
Prion
•added 2021/04/13 8:15 p.m.•33 views

Remote code execution

Microsoft Internet Messaging API Remote Code Execution Vulnerability...

6.8CVSS7.9AI score0.0226EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
•added 2021/04/13 7:32 p.m.•61 views

CVE-2021-27089 Microsoft Internet Messaging API Remote Code Execution Vulnerability

...

7.8CVSS8.3AI score0.0226EPSS
SaveExploits0References1
Rows per page
Query Builder