Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1185 matches found

OSV
OSV•added 2017/08/04 4:29 p.m.•2 views

CVE-2017-1331

IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126233...

5.4CVSS5.4AI score0.00729EPSS
SaveExploits0References3
NVD
NVD•added 2017/08/04 4:29 p.m.•17 views

CVE-2017-1331

IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126233...

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3
Prion
Prion•added 2017/08/04 4:29 p.m.•9 views

Cross site scripting

IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126233...

3.5CVSS5.2AI score0.00729EPSS
SaveExploits0References3Affected Software1
CVE
CVE•added 2017/08/04 4:0 p.m.•46 views

CVE-2017-1331

IBM Content Navigator is vulnerable to cross-site scripting (CVE-2017-1331) in multiple versions. Affected products/versions per connected sources: IBM Content Navigator 2.0.3.5–2.0.3.8 and 3.0.0. The root cause is XSS in the Web UI that can embed arbitrary JavaScript, potentially leading to cred...

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/08/04 4:0 p.m.•17 views

CVE-2017-1331

IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126233...

5.2AI score0.00729EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty•added 2017/05/31 1:39 p.m.•8 views

dealers.antiquesnavigator.com XSS vulnerability

Open Bug Bounty ID: OBB-243272 Description| Value ---|--- Affected Website:| dealers.antiquesnavigator.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

6.3AI score
SaveExploits0
CNVD
CNVD•added 2017/05/24 12:0 a.m.•4 views

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2017-07532)

IBM Content Navigator is a Web client from IBM USA that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator versions 2.0.3.5 through 2.0.3.8 and 3.0.0. A remote attacker can...

5.4CVSS6.3AI score0.00538EPSS
SaveExploits0References1
OSV
OSV•added 2017/05/22 8:29 p.m.•3 views

CVE-2017-1282

IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760...

5.4CVSS5.4AI score0.00538EPSS
SaveExploits0References2
Prion
Prion•added 2017/05/22 8:29 p.m.•14 views

Cross site scripting

IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760...

3.5CVSS5.1AI score0.00538EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2017/05/22 8:29 p.m.•14 views

CVE-2017-1282

IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760...

5.4CVSS5.2AI score0.00538EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2017/05/22 8:0 p.m.•22 views

CVE-2017-1282

IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760...

5.2AI score0.00538EPSS
SaveExploits0References2
CVE
CVE•added 2017/05/22 8:0 p.m.•47 views

CVE-2017-1282

IBM Content Navigator (CMIS 2.0/3.0) is affected by a cross-site scripting vulnerability (CVE-2017-1282). The issue allows attackers to inject arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure in a trusted session. Affected versions are IBM Content Navigator 2.0....

5.4CVSS5.2AI score0.00538EPSS
SaveExploits0References2Affected Software1
seebug.org
seebug.org•added 2017/04/24 12:0 a.m.•41 views

Chrome Universal XSS using navigator.serviceWorker.ready (CVE-2015-1292)

VULNERABILITY DETAILS From /WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp: ScriptPromise ServiceWorkerContainer::readyScriptState callerState if !executionContext return ScriptPromise; ... if !mready mready = createReadyProperty; if mprovider mprovider-getRegistrationForReadynew...

5CVSS8.6AI score0.0157EPSS
SaveExploits1
CNVD
CNVD•added 2017/03/30 12:0 a.m.•4 views

Cloudera Navigator Security Bypass Vulnerability

Cloudera Navigator is a suite of data management tools for Hadoop platform integration from Cloudera, USA. The tool provides features such as auditing data access and validating access rights, searching metadata, and visualization. A security bypass vulnerability exists in Cloudera Navigator. An...

3.5CVSS6.7AI score0.00509EPSS
SaveExploits0References1
NVD
NVD•added 2017/03/23 8:59 p.m.•15 views

CVE-2015-4078

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

3.5CVSS4.4AI score0.00509EPSS
SaveExploits0References1
Prion
Prion•added 2017/03/23 8:59 p.m.•19 views

Code injection

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

3.5CVSS3.9AI score0.99999EPSS
SaveExploits7References1Affected Software2
Cvelist
Cvelist•added 2017/03/23 8:0 p.m.•24 views

CVE-2015-4078

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 aka POODLE...

4.7AI score0.00509EPSS
SaveExploits0References1
CVE
CVE•added 2017/03/23 8:0 p.m.•82 views

CVE-2015-4078

CVE-2015-4078 maps to the POODLE-like issue where SSLv3 is supported by Cloudera Navigator 2.2.x (pre-2.2.4) and 2.3.x (pre-2.3.3), enabling a padding-oracle attack to obtain plaintext data. Public references in the connected docs describe SSLv3/POODLE vulnerability details and remediation patter...

3.5CVSS4.6AI score0.00509EPSS
SaveExploits0References1Affected Software2
OSV
OSV•added 2017/03/20 4:59 p.m.•2 views

CVE-2017-1146

IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1999736...

5.4CVSS5.4AI score
SaveExploits0References2
NVD
NVD•added 2017/03/20 4:59 p.m.•17 views

CVE-2017-1146

IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1999736...

5.4CVSS5.3AI score0.00538EPSS
SaveExploits0References2
Rows per page
Query Builder