Lucene search
+L

6126 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/15 12:00 a.m.•8 views

CVE-2016-10395: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FlexNet Publisher versions before Luton SP1 11.14.1.1 running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute...

7.8CVSS7.7AI score0.00402EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/06/15 12:00 a.m.•6 views

PT-2017-2426

Name of the Vulnerable Software and Affected Versions FlexNet Publisher versions before 11.14.1.1 Luton SP1 Description The issue is caused by a boundary error related to a named pipe within the FlexNet Publisher Licensing Service, which can be exploited to cause an out-of-bounds memory read acce...

10CVSS0.00402EPSS
SaveExploits0References9
OSV
OSV
•added 2017/05/27 12:29 a.m.•11 views

CVE-2017-3129

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

6.1CVSS6AI score0.00713EPSS
SaveExploits0References2
NVD
NVD
•added 2017/05/27 12:29 a.m.•26 views

CVE-2017-3129

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

6.1CVSS6.3AI score0.00713EPSS
SaveExploits0References2
Prion
Prion
•added 2017/05/27 12:29 a.m.•27 views

Cross site scripting

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

4.3CVSS6.2AI score0.00713EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/27 12:00 a.m.•7 views

CVE-2017-3129: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

6.1CVSS6.5AI score0.00713EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/05/26 10:00 p.m.•36 views

CVE-2017-3129

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature...

6.2AI score0.00713EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/05/26 12:00 a.m.•4 views

PT-2017-15676

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 5.7.1 and below Description A Cross-Site Scripting issue allows an attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature. Recommendations...

6.1CVSS0.00713EPSS
SaveExploits0References4
seebug.org
seebug.org
•added 2017/04/25 12:00 a.m.•47 views

WordPress Plugin Podlove Podcast Publisher Cross Site Scripting and SQL Injection Vulnerabilities

The second plugin that will be dissected is called Podlove Publisher, a Wordpress plugin to manage podcasts. It suffered from multiple SQL injections and cross-site scripting vulnerabilities funnily enough also in a parameter named tab that are fixed by now. The SQL injections were all caused by...

6.8AI score
SaveExploits0
Fortinet
Fortinet
•added 2017/04/19 12:00 a.m.•42 views

XSS Vulnerability in FortiWeb Site Publisher

The Site Publisher functionality of FortiWeb has been found vulnerable to a Cross-Site Scripting vulnerability via an improperly sanitized parameter in a POST request...

4.3CVSS1.8AI score0.00713EPSS
SaveExploits0Affected Software1
Symantec
Symantec
•added 2017/04/17 12:00 a.m.•104 views

Apache Log4j CVE-2017-5645 Remote Code Execution Vulnerability

Description Apache Log4j is prone to remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Apache Log4j 2.0-alpha1 through 2.8.1 ar...

7.5CVSS7.9AI score0.89792EPSS
SaveExploits2References5Affected Software84
Microsoft KB
Microsoft KB
•added 2017/03/07 12:00 a.m.•14 views

March 7, 2017, update for Publisher 2016 (KB3128047)

None None...

5.2AI score
SaveExploits0
OSV
OSV
•added 2017/03/03 3:59 p.m.•16 views

CVE-2017-5571

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

6.1CVSS5.9AI score0.0178EPSS
SaveExploits0References6
Prion
Prion
•added 2017/03/03 3:59 p.m.•36 views

Open redirect

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

5.8CVSS6.4AI score0.0178EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2017/03/03 3:59 p.m.•35 views

CVE-2017-5571

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

6.1CVSS6.8AI score0.0178EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2017/03/03 3:00 p.m.•46 views

CVE-2017-5571

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

6.2AI score0.0178EPSS
SaveExploits0References6
CVE
CVE
•added 2017/03/03 3:00 p.m.•79 views

CVE-2017-5571

CVE-2017-5571 is an open-redirect vulnerability in the lmadmin component of Flexera FlexNet Publisher (aka Flex License Manager) up to version 11.14.1, used in Citrix License Server for Windows and License Server VPX. The vulnerability could enable remote attackers to redirect users to attacker-c...

6.1CVSS6.1AI score0.0178EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2017/03/03 12:00 a.m.•2 views

PT-2017-16582

Name of the Vulnerable Software and Affected Versions FlexNet Publisher versions 11.14.1 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For versions 11.14.1 and earlier, update to a version later tha...

6.1CVSS0.0178EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/03 12:00 a.m.•8 views

CVE-2017-5571: URL Redirection to Untrusted Site

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

6.1CVSS6AI score0.0178EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2017/03/02 8:38 p.m.•16 views

ezpublisher-en.sophiapublisher.com XSS vulnerability

Vulnerable URL: http://ezpublisher-en.sophiapublisher.com/bookdetail.php?bookid=80"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

6.3AI score
SaveExploits0
Rows per page
Query Builder