Lucene search
+L

764 matches found

NVD
NVD
•added 2019/03/21 5:29 p.m.•33 views

CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...

9.8CVSS9.6AI score0.76629EPSS
SaveExploits7References2
osv_cve
osv_cve
•added 2019/03/21 5:29 p.m.•10 views

CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...

9.8CVSS7AI score
SaveExploits0References2
Prion
Prion
•added 2019/03/21 5:29 p.m.•22 views

Improper access control

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...

7.5CVSS9.4AI score0.76629EPSS
SaveExploits7References1Affected Software1
Cvelist
Cvelist
•added 2019/03/21 4:45 p.m.•38 views

CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...

9.6AI score0.76629EPSS
SaveExploits7References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/21 12:00 a.m.•7 views

CVE-2019-7238: Undefined Security Weakness

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...

9.8CVSS8.5AI score0.76629EPSS
SaveExploits7References1
Positive Technologies
Positive Technologies
•added 2019/03/21 12:00 a.m.•5 views

PT-2019-6220

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.15.0 Description The issue is related to incorrect access control in the Sonatype Nexus Repository Manager, which can be exploited by a remote attacker to execute arbitrary code. This is du...

10CVSS6.8AI score0.76629EPSS
SaveExploits7References16
Veracode
Veracode
•added 2019/03/12 2:07 a.m.•32 views

Cross-Site Scripting (XSS)

nexus-repository is vulnerable to cross-site scripting XSS. A lack of input validation and output sanitization allows a remote attacker to inject arbitrary Javascript into victim's browser through multiple parameters...

4.8CVSS5.3AI score0.01438EPSS
SaveExploits0References4Affected Software1
myhack58
myhack58
•added 2019/03/12 12:00 a.m.•278 views

Nexus Repository Manager 3 new vulnerability has been used in mining Trojan spread, users are advised to fix as soon as possible-vulnerability warning-the black bar safety net

Recently, Ali cloud security monitoring to watchbog mining Trojan use the new exposure of the Nexus Repository Manager 3 remote code execution vulnerabilityCVE-2019-7238for attack and mining the events. It is worth noting that this attack Start Time 2 on 24th and 2 on 5 May above products, the...

9CVSS9AI score0.87549EPSS
SaveExploits18
GithubExploit
GithubExploit
•added 2019/02/24 11:09 p.m.•15 views

Exploit for CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Executio...

9.8CVSS0.76629EPSS
SaveExploits7
CNVD
CNVD
•added 2018/11/16 12:00 a.m.•15 views

Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2019-07005)

Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A cross-site scripting vulnerability exists in Sonatype NXRM versions prior to 3.14. A remote attacker can exploit this vulnerability to execute arbitrary JavaScript code in a user's browser...

6.1CVSS6.3AI score0.00691EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/11/16 12:00 a.m.•21 views

Sonatype Nexus Repository Manager Java Code Execution Vulnerability

Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A security vulnerability exists in Sonatype NXRM versions prior to 3.14. An attacker can exploit the vulnerability to execute code on the server...

7.2CVSS7.9AI score0.0516EPSS
SaveExploits2References1
CNVD
CNVD
•added 2018/11/16 12:00 a.m.•20 views

Sonatype Nexus Repository Manager Improper Access Control Vulnerability

Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A security vulnerability exists in Sonatype NXRM versions prior to 3.14, which is caused by the program failing to enforce proper access control. The vulnerability can be exploited to gain access to other hosts and open por...

7.5CVSS7.6AI score0.01124EPSS
SaveExploits0References1
Prion
Prion
•added 2018/11/15 8:29 p.m.•42 views

Design/Logic Flaw

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

6.5CVSS7AI score0.0516EPSS
SaveExploits2References2Affected Software1
Prion
Prion
•added 2018/11/15 8:29 p.m.•20 views

Cross site scripting

Sonatype Nexus Repository Manager before 3.14 allows XSS...

4.3CVSS6.3AI score0.00691EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/11/15 8:29 p.m.•29 views

CVE-2018-16619

Sonatype Nexus Repository Manager before 3.14 allows XSS...

6.1CVSS6.3AI score0.00691EPSS
SaveExploits0References1
NVD
NVD
•added 2018/11/15 8:29 p.m.•66 views

CVE-2018-16621

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

7.2CVSS7AI score0.0516EPSS
SaveExploits2References2
Prion
Prion
•added 2018/11/15 8:29 p.m.•28 views

Design/Logic Flaw

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

5CVSS7.6AI score0.01124EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2018/11/15 8:29 p.m.•44 views

CVE-2018-16621

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

7.2CVSS6.9AI score
SaveExploits0References2
osv_cve
osv_cve
•added 2018/11/15 8:29 p.m.•32 views

CVE-2018-16619

Sonatype Nexus Repository Manager before 3.14 allows XSS...

6.1CVSS6.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2018/11/15 8:00 p.m.•38 views

CVE-2018-16620

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

7.6AI score0.01124EPSS
SaveExploits0References1
Rows per page
Query Builder