Lucene search
+L

3458 matches found

CNVD
CNVD
•added 2015/03/05 12:00 a.m.•13 views

Maroyaka CGI Maroyaka Relay Novel Cross-Site Scripting Vulnerability

Maroyaka CGI Maroyaka Relay Novel is a CGI script for publishing text to websites. A cross-site scripting vulnerability exists in Maroyaka CGI Maroyaka Relay Novel. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

4.3CVSS6.2AI score0.01148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/03/05 12:00 a.m.•7 views

CVE-2015-0893: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.9AI score0.01148EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/03/04 5:49 a.m.•18 views

Maroyaka Relay Novel vulnerable to cross-site scripting

Overview Maroyaka Relay Novel provided by Maroyaka CGI is a CGI script for posting text into a website. Maroyaka Relay Novel contains a persistent cross-site scripting vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

5CVSS6.1AI score0.01148EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/03/04 12:00 a.m.•37 views

JVN#91016415: Maroyaka Relay Novel vulnerable to cross-site scripting

Maroyaka Relay Novel provided by Maroyaka CGI is a CGI script for posting text into a website. Maroyaka Relay Novel contains a persistent cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest...

4.3CVSS6AI score0.01148EPSS
SaveExploits0
securityvulns
securityvulns
•added 2015/02/23 12:00 a.m.•50 views

IBM Endpoint Manager crossite scripting

Relay Diagnostics crossite scripting...

4.3CVSS2.3AI score0.02253EPSS
SaveExploits4References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/02/16 12:00 a.m.•6 views

CVE-2014-6137: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.02253EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2015/02/16 12:00 a.m.•1 views

PT-2015-3819

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager versions prior to 9.1.1229 Description A cross-site scripting XSS issue exists in the Relay Diagnostic page, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to...

4.3CVSS0.02253EPSS
SaveExploits4References5
exploitpack
exploitpack
•added 2015/02/11 12:00 a.m.•71 views

IBM Endpoint Manager - Persistent Cross-Site Scripting

IBM Endpoint Manager - Persistent Cross-Site Scripting Advisory: Cross-Site Scripting in IBM Endpoint Manager Relay Diagnostics Page During a penetration test, RedTeam Pentesting discovered that the IBM Endpoint Manager Relay Diagnostics page allows anybody to persistently store HTML and JavaScri...

4.3CVSS6.1AI score0.02253EPSS
SaveExploits4
Kitploit
Kitploit
•added 2015/02/03 10:12 p.m.•47 views

Socat - Multipurpose relay (SOcket CAT)

Socat is a utility similar to the venerable Netcat that works over a number of protocols and through a files, pipes, devices terminal or modem, etc., sockets Unix, IP4, IP6 - raw, UDP, TCP, a client for SOCKS4, proxy CONNECT, or SSL, etc. It provides forking, logging, and dumping, different modes...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/01/22 12:00 a.m.•61 views

Apache Traffic Server 5.1.x < 5.1.1 Multiple Vulnerabilities (POODLE)

According to its banner, the version of Apache Traffic Server running on the remote host is 5.1.x prior to 5.1.1. It is, therefore, affected by the following vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability is due to the way SSL...

9.8CVSS6.7AI score0.99999EPSS
SaveExploits7References7
Cisco
Cisco
•added 2015/01/15 5:54 p.m.•56 views

Cisco ASA Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCPv6 relay feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 packets. Cisco ASA Software is affected by this...

7.1CVSS6.4AI score0.01032EPSS
SaveExploits0References1
NVD
NVD
•added 2015/01/14 7:59 p.m.•31 views

CVE-2015-0578

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

5.7CVSS6.4AI score0.01032EPSS
SaveExploits0References5
Prion
Prion
•added 2015/01/14 7:59 p.m.•32 views

Code injection

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

5.7CVSS6.9AI score0.01032EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2015/01/14 7:00 p.m.•40 views

CVE-2015-0578

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

6.3AI score0.01032EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/14 12:00 a.m.•7 views

CVE-2015-0578: Improper Input Validation

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

5.7CVSS5.8AI score0.01032EPSS
SaveExploits0References3
Veeam
Veeam
•added 2014/12/08 12:00 a.m.•66 views

How to configure Email Notifications when using Gmail or Google Apps Mail

Solution Select the product below to be taken to the product-specific information for using Google Gmail to send email notifications. Veeam Backup & Replication v12 Veeam Backup & Replication v13 Veeam ONE v12 Veeam ONE v13 Veeam Backup for Microsoft 365 v7+ Veeam Agent for Microsoft Windows v6+...

6.5AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2014/10/14 12:00 a.m.•33 views

Tor 'Relay Early' Traffic Confirmation Attack Vulnerability (Oct 2014) - Linux

Tor is prone to an information disclosure vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

5.8CVSS6AI score0.02104EPSS
SaveExploits0References3
exploitpack
exploitpack
•added 2014/09/13 12:00 a.m.•80 views

Ammyy Admin 3.5 - Remote Code Execution (Metasploit)

Ammyy Admin 3.5 - Remote Code Execution Metasploit Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34647.zip aa0day.zip The Revenge of the Scammers This exploit is an 0day in Ammyy Admin http://www.ammyy.com/en/ a remote desktop type software that is wel...

8.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2014/08/04 12:00 a.m.•46 views

tor user deanonymizing

User deanonimization via Relay-early cells...

5.8CVSS2.5AI score0.02104EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2014/08/01 12:00 a.m.•38 views

Debian DSA-2993-1 : tor - security update

Several issues have been discovered in Tor, a connection-based low-latency anonymous communication system, resulting in information leaks. - Relay-early cells could be used by colluding relays on the network to tag user circuits and so deploy traffic confirmation attacks CVE-2014-5117. The update...

5.8CVSS8.1AI score0.02104EPSS
SaveExploits0References6
Rows per page
Query Builder