Lucene search
+L

2541 matches found

CNVD
CNVD
•added 2020/03/26 12:00 a.m.•29 views

TP-Link Archer C50 Denial of Service Vulnerability

The TP-Link Archer C50 is a wireless router from China P&L TP-Link. A security vulnerability exists in versions prior to TP-Link Archer C50 V3 Build 200318 Rel. 62209. A remote attacker can exploit this vulnerability to cause a denial of service via an HTTP header with an illegal referer field...

7.8CVSS6.8AI score0.26682EPSS
SaveExploits6
GithubExploit
GithubExploit
•added 2020/03/25 6:18 p.m.•14 views

Exploit for Missing Release of Resource after Effective Lifetime in Tp-Link Archer_C50

CVE-2020-9375 TP-Link Archer C50 V3 devices before Build 20031...

7.8CVSS0.26682EPSS
SaveExploits6
osv_cve
osv_cve
•added 2020/03/25 3:15 p.m.•23 views

CVE-2020-9375

TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field...

7.5CVSS7.2AI score0.26682EPSS
SaveExploits6References4
attackerkb
attackerkb
•added 2020/03/25 3:15 p.m.•15 views

CVE-2020-9375

TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field...

7.8CVSS7.3AI score0.26682EPSS
SaveExploits6References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/25 12:00 a.m.•8 views

CVE-2020-9375: Missing Release of Resource after Effective Lifetime

TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field...

7.8CVSS7.3AI score0.26682EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
•added 2020/03/25 12:00 a.m.•7 views

PT-2020-20619

Name of the Vulnerable Software and Affected Versions TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 Description The issue allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field. This can lead to service disruption...

7.8CVSS0.26682EPSS
SaveExploits6References11
CNVD
CNVD
•added 2020/03/14 12:00 a.m.•29 views

Chadha Software Technologies PHPKB Standard Multi-Language article.php Cross-Site Scripting Vulnerability

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A cross-site scripting vulnerability exists in the way the Referer header is handled in the article.php file in Chadha Software...

5.4CVSS6.3AI score0.00602EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/03/12 2:15 p.m.•20 views

CVE-2020-10388

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/report-referrers.php vulnerable file admin/include/functions-articles.php...

5.4CVSS6.2AI score0.00602EPSS
SaveExploits1References2
NVD
NVD
•added 2020/03/12 2:15 p.m.•47 views

CVE-2020-10388

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/report-referrers.php vulnerable file admin/include/functions-articles.php...

5.4CVSS5.4AI score0.00602EPSS
SaveExploits1References2
Prion
Prion
•added 2020/03/12 2:15 p.m.•34 views

Cross site scripting

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/report-referrers.php vulnerable file admin/include/functions-articles.php...

3.5CVSS5.4AI score0.00602EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/03/12 1:03 p.m.•54 views

CVE-2020-10388

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/report-referrers.php vulnerable file admin/include/functions-articles.php...

5.4AI score0.00602EPSS
SaveExploits1References2
CVE
CVE
•added 2020/03/12 1:03 p.m.•73 views

CVE-2020-10388

Chadha PHPKB Standard Multi-Language v9 is affected by CVE-2020-10388 due to improper handling/validation of the Referer header in article.php, enabling Stored (Blind) XSS via admin/report-referrers.php (vulnerable code in admin/include/functions-articles.php). Affected component: PHPKB’s article...

5.4CVSS6.3AI score0.00602EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•12 views

CVE-2020-10388: Improper Neutralization of Input During Web Page Generation

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/report-referrers.php vulnerable file admin/include/functions-articles.php...

5.4CVSS6.3AI score0.00602EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/03/12 12:00 a.m.•22 views

PT-2020-12058 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of the Referer header in article.php, allowing attackers to execute Stored Blind XSS by injecting arbitrary web script or HTML. This is specifically...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2020/02/27 5:15 a.m.•17 views

CVE-2017-6371

Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...

7.5CVSS5.8AI score0.04676EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/27 12:00 a.m.•4 views

CVE-2017-6371: Undefined Security Weakness

Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service service crash via a long string in the HTTP Referer header...

7.5CVSS7.2AI score0.04676EPSS
SaveExploits5References1
Positive Technologies
Positive Technologies
•added 2020/02/27 12:00 a.m.•5 views

PT-2020-8479

Name of the Vulnerable Software and Affected Versions: Synchronet BBS version 3.16c for Windows Description: The issue allows remote attackers to cause a denial of service, resulting in a service crash, by sending a long string in the HTTP Referer header. Recommendations: For Synchronet BBS versi...

7.5CVSS0.04676EPSS
SaveExploits5References5
CNVD
CNVD
•added 2020/02/17 12:00 a.m.•16 views

Dolibarr Cross-Site Scripting Vulnerability (CNVD-2020-10498)

Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...

5.4CVSS6.5AI score0.00851EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/02/16 10:15 p.m.•22 views

CVE-2020-9016

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header...

5.4CVSS5.9AI score0.00851EPSS
SaveExploits1References1
NVD
NVD
•added 2020/02/16 10:15 p.m.•36 views

CVE-2020-9016

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header...

5.4CVSS5.3AI score0.00851EPSS
SaveExploits1References1
Rows per page
Query Builder