Lucene search
+L

498 matches found

OSV
OSV
added 2020/08/07 10:28 p.m.50 views

GHSA-WVHM-4HHF-97X9 Cross-Site Scripting in Prism

Impact The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin =v1.10.0 or the Previewer: Easing plugin...

7.1CVSS7.6AI score0.02041EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2020/08/07 10:28 p.m.70 views

Cross-Site Scripting in Prism

Impact The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin =v1.10.0 or the Previewer: Easing plugin...

7.5CVSS3.2AI score0.02041EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2020/08/07 5:15 p.m.12 views

CVE-2020-15138

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

7.5CVSS7.3AI score
SaveExploits0References3
NVD
NVD
added 2020/08/07 5:15 p.m.25 views

CVE-2020-15138

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

7.5CVSS7.3AI score0.02041EPSS
SaveExploits0References3
OSV
OSV
added 2020/08/07 5:15 p.m.6 views

DEBIAN-CVE-2020-15138

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

7.5CVSS8.6AI score0.02041EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/07 5:15 p.m.21 views

Cross site scripting

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

2.6CVSS7.5AI score0.02041EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/08/07 5:15 p.m.13 views

UBUNTU-CVE-2020-15138

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

7.5CVSS7.6AI score0.02041EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2020/08/07 5:15 p.m.35 views

CVE-2020-15138

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

7.5CVSS7.2AI score0.02041EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2020/08/07 4:30 p.m.44 views

CVE-2020-15138 Cross-Site Scripting in Prism

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

7.1CVSS7.6AI score0.02041EPSS
SaveExploits0References3
CVE
CVE
added 2020/08/07 4:30 p.m.124 views

CVE-2020-15138

CVE-2020-15138: Prism.js contains an XSS via the Previewers/Easing previews in Prism >=1.1.0 with Previewers plugin (>=1.10.0) or Previewer: Easing (1.1.0–1.9.0). The issue is fixed in Prism 1.21.0. A workaround is to disable easing preview on impacted code blocks if upgrading is not feasib...

7.5CVSS7.2AI score0.02041EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2020/08/07 4:30 p.m.64 views

CVE-2020-15138

Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...

7.5CVSS7.6AI score0.02041EPSS
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/07/21 11:37 a.m.15 views

prism-surfboards.com Cross Site Scripting vulnerability OBB-1233775

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
pentestit
pentestit
added 2019/08/28 5:58 p.m.78 views

UPDATE: Merlin v0.8.0

PenTestIT RSS Feed A week ago an update - Merlin v0.8.0 was released. There was a brief mention about Merlin in my post titled - List of Open Source C2 Post-Exploitation Frameworks. This new version includes several new features to increase Operations Security OPSEC and usability. One of the more...

7.8AI score
SaveExploits0
Prion
Prion
added 2019/05/24 4:29 p.m.28 views

Code injection

In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...

6.5CVSS8.8AI score0.02074EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2019/05/24 4:29 p.m.8 views

CVE-2019-11875

In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...

8.8CVSS5.8AI score0.02074EPSS
SaveExploits2References2
NVD
NVD
added 2019/05/24 4:29 p.m.40 views

CVE-2019-11875

In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...

8.8CVSS8.8AI score0.02074EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2019/05/24 3:55 p.m.47 views

CVE-2019-11875

In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...

8.9AI score0.02074EPSS
SaveExploits2References2
CVE
CVE
added 2019/05/24 3:55 p.m.103 views

CVE-2019-11875

CVE-2019-11875 concerns Blue Prism Robotic Process Automation (RPA) 6.4.0.8445. The issue, in AutomateAppCore.dll, is an access-control flaw that allows privilege escalation when a valid user connects to the server; the user’s roles aren’t required to have permissions. The attack path involves mo...

8.8CVSS8.7AI score0.02074EPSS
SaveExploits2References2Affected Software1
Packet Storm
Packet Storm
added 2019/05/22 12:00 a.m.137 views

Blue Prism Robotic Process Automation (RPA) Privilege Escalation

------------------------------------------------------------------------ SySS Security Advisory: Blue Prism Robotic Process Automation RPA - Privilege Escalation ------------------------------------------------------------------------ Advisory ID: SYSS-2019-002 Product: Blue Prism Robotic Process...

0.8AI score0.02074EPSS
SaveExploits2
exploitpack
exploitpack
added 2018/10/30 12:00 a.m.71 views

Nutanix AOS Prism 5.5.5 (LTS) 5.8.1 (STS) - SFTP Authentication Bypass

Nutanix AOS Prism 5.5.5 LTS 5.8.1 STS - SFTP Authentication Bypass Exploit Title: Nutanix AOS & Prism - SFTP Authentication Bypass Date: 2018-10-27 Exploit Author: Adam Brown Vendor Homepage: https://www.nutanix.org Software Link: https://www.nutanix.com/products/software-options/ Version: 5.5.5...

7.5CVSS0.6AI score0.27105EPSS
SaveExploits10
Rows per page
Query Builder