Lucene search
+L

238 matches found

Positive Technologies
Positive Technologies
•added 2022/12/08 12:00 a.m.•9 views

PT-2022-35954 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to kprobes and ftrace. It involves skipping the clearing of aggrprobe's post handler in the kprobe-on-ftrace case. The actual impact and attack plausibility have not yet...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/03 12:00 a.m.•15 views

PT-2022-26540 · Unknown · House Rental System

Name of the Vulnerable Software and Affected Versions: House Rental System affected versions not specified Description: A critical vulnerability has been found in the House Rental System, affecting an unknown functionality of the file search-property.php of the component POST Request Handler. The...

9.8CVSS9.5AI score0.00671EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/11/01 12:00 a.m.•19 views

PT-2022-24133 · Unknown · Flipbook Plugin

Name of the Vulnerable Software and Affected Versions: Flipbook Plugin affected versions not specified Description: A vulnerability was found in the Flipbook Plugin, affecting some unknown functionality of the file post.php of the component Edit Post Handler. The manipulation of the Shortcode...

6AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/06/21 12:00 a.m.•25 views

Cross site scripting in Elefant CMS

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS5.4AI score0.00511EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/06/21 12:00 a.m.•35 views

GHSA-4453-G295-24MH Cross site scripting in Elefant CMS

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS4.4AI score0.00511EPSS
SaveExploits0References4
OSV
OSV
•added 2022/06/20 5:15 a.m.•17 views

CVE-2017-20060

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS4.6AI score0.00511EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/20 5:15 a.m.•23 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

3.5CVSS5.2AI score0.00511EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/06/20 4:50 a.m.•2 views

CVE-2017-20060

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS0.00511EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/06/20 4:50 a.m.•20 views

CVE-2017-20060 Elefant CMS Blog Post Persistent cross site scriting

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

3.5CVSS5.5AI score0.00511EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/06/20 4:50 a.m.•34 views

CVE-2017-20060 Elefant CMS Blog Post Persistent cross site scriting

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

3.5CVSS5.3AI score0.00511EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/06/20 12:00 a.m.•1 views

PT-2022-7933

Name of the Vulnerable Software and Affected Versions Elefant CMS version 1.3.12-RC Description A problematic issue was found in the Blog Post Handler component, leading to basic cross site scripting Persistent. The attack can be initiated remotely. Upgrading to version 1.3.13 addresses this issu...

5.4CVSS0.00511EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/20 12:00 a.m.•5 views

CVE-2017-20060: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS4.8AI score0.00511EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/12/02 12:00 a.m.•17 views

SakuraPanel 跨站脚本漏洞

SakuraPanel is an open source, Frp-based intranet penetration management panel application. a cross-site scripting vulnerability exists in SakuraPanel, which stems from an exit function in the product/master/core/PostHandler.php file that does not validate data. An attacker could print...

6.1CVSS5.2AI score0.00641EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/11/19 12:00 a.m.•96 views

Jupyter Notebook Cross-Site Scripting Vulnerability (CNVD-2019-09602)

Jupyter Notebook is an open source web application that creates and shares documents containing live code, equations, visualizations, and narrative text. A cross-site scripting vulnerability exists in Jupyter Notebook versions prior to 5.7.1, which stems from a failure to set the content security...

6.1CVSS6.1AI score0.01511EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•33 views

Moby NetSuite 1.0/1.2 POST Handler Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6277/info A buffer overflow vulnerability has been reported for Moby NetSuite that may result in a denial of service condition. Reportedly, it is possible to cause NetSuite to crash when a malformed POST request is...

7.1AI score
SaveExploits0
Ubuntu
Ubuntu
•added 2011/10/18 6:22 a.m.•112 views

USN-1231-1: PHP Vulnerabilities

Mateusz Kocielski, Marek Kroemeke and Filip Palian discovered that a stack-based buffer overflow existed in the socketconnect function's handling of long pathnames for AFUNIX sockets. A remote attacker might be able to exploit this to execute arbitrary code; however, the default compiler options...

7.5CVSS8.6AI score0.23129EPSS
SaveExploits19
NVD
NVD
•added 2011/06/16 11:55 p.m.•38 views

CVE-2011-2202

The rfc1867posthandler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request...

6.4CVSS7.4AI score0.19736EPSS
SaveExploits2References21
Positive Technologies
Positive Technologies
•added 2011/06/16 12:00 a.m.•5 views

PT-2011-3679

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.7 Description The issue concerns a problem with the rfc1867 post handler function in PHP, which does not properly restrict filenames in multipart/form-data POST requests. This allows remote attackers to conduct absolu...

6.8CVSS0.50337EPSS
SaveExploits9References194
Rows per page
Query Builder