Lucene search
+L

528 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/15 12:00 a.m.•6 views

CVE-2018-0697: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.4AI score0.00842EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/11/15 12:00 a.m.•6 views

PT-2018-9022

Name of the Vulnerable Software and Affected Versions Metabase versions 0.29.3 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Metabase versions 0.29.3 and earlier, update to a version...

6.1CVSS0.00842EPSS
SaveExploits0References4
CNVD
CNVD
•added 2018/10/12 12:00 a.m.•19 views

Metabase Cross-Site Scripting Vulnerability

Metabase is a simple, open-source way to analyze and learn from the data you get by asking your company members questions. Metabase has a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary scripts on a logged-in user's Web browser...

6.1CVSS6.2AI score0.00842EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/10/11 6:54 a.m.•19 views

Metabase vulnerable to cross-site scripting

Overview Metabase provided by Metabase, Inc. contains a reflected cross-site scripting vulnerability CWE-79. Yuuta Watanabe of STNet, Incorporated reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary...

6.1CVSS6AI score0.00842EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/10/11 12:00 a.m.•575 views

JVN#14323043: Metabase vulnerable to cross-site scripting

Metabase provided by Metabase, Inc. contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged-in user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer...

6.1CVSS6.1AI score0.00842EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/23 12:00 a.m.•36 views

IIS Metabase

Check the IIS Metabase for AspEnableParentPaths This script reads the IIS Metabase and gets the AspEnableParentPaths configuration. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/23 12:00 a.m.•22 views

IIS Metabase

Check the IIS Metabase for AspEnableParentPaths This script reads the IIS Metabase an get the AspEnableParentPaths configuration. OpenVAS Vulnerability Test $Id: GSHBIISmetabase.nasl 7076 2017-09-07 11:53:47Z teissa $ Check the IIS Metabase for AspEnableParentPaths Windows Authors: Thomas Rotter...

SaveExploits0
Packet Storm
Packet Storm
•added 1999/08/17 12:00 a.m.•33 views

iis.4.0.metabase.passwd.txt

Date: Mon, 22 Feb 1999 11:26:41 +0100 From: Patrick CHAMBET To: [email protected] Subject: Alert: IIS 4.0 metabase can reveal plaintext passwords Hi all, We knew that Windows NT passwords are stored in 7 different places across the system. Here is a 8th place: the IIS 4.0 metabase. IIS 4.0 uses its...

7.4AI score
SaveExploits0
Rows per page
Query Builder