Lucene search
+L

316 matches found

CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•15 views

Secomea SiteManager 跨站脚本漏洞

Secomea SiteManager is an application from the Danish company Secomea. All versions of Secomea SiteManager prior to 9.7 have security vulnerabilities that could be exploited to allow injection of scripts by logged-in users...

9.1CVSS5.5AI score0.00611EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•12 views

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from improper handling of permissions in Secomea GateManager's Web UI, and could be exploited to allow logged-in users to...

5.5CVSS5.8AI score0.005EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•14 views

Secomea GateManager 信息泄露漏洞

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in all versions of Secomea GateManager prior to 9.7. The vulnerability stems from the exposure of query string information in GET requests of the LMM API, which could be exploited ...

7.5CVSS6.6AI score0.00242EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•13 views

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerabilities exist in versions prior to Secomea GateManager 9.7, which could be exploited by attackers to allow logged-in users to issue incorrect queries without being logged in...

4.3CVSS5.3AI score0.00625EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•12 views

Secomea GateManager 跨站请求伪造漏洞

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerabilities exist in versions prior to Secomea GateManager 9.7, which can be exploited by attackers to issue get requests in a logged-in user session...

8.8CVSS8AI score0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•17 views

Secomea GateManager 资源管理错误漏洞

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerabilities exist in versions prior to Secomea GateManager 9.7, which could be exploited to allow logged-in users to write text entries in the audit log...

4.3CVSS5.3AI score0.00553EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•14 views

Secomea SiteManager 缓冲区错误漏洞

Secomea SiteManager is a Danish Secomea application that provides a remote maintenance function for industrial equipment. Secomea SiteManager is vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to cause arbitrary code execution...

7.2CVSS7.9AI score0.01007EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/11 6:15 p.m.•29 views

CVE-2021-32009

Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...

6.1CVSS0.00495EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/11 6:15 p.m.•23 views

Cross site scripting

Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...

4.3CVSS5.9AI score0.00495EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/03/11 5:53 p.m.•96 views

CVE-2021-32009

CVE-2021-32009 is a documented XSS vulnerability affecting Secomea GateManager firmware page. The issue (titled Missing XSS guards on firmware page) permits a logged-in user to inject JavaScript into the browser session. Affected software: GateManager Version 9.6.621421014 and all prior versions....

6.1CVSS5.4AI score0.00495EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/11 5:53 p.m.•38 views

CVE-2021-32009 Missing XSS guards on firmware page

Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...

5CVSS6.1AI score0.00495EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/03/11 12:00 a.m.•12 views

GateManager跨站脚本漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager that allows a logged in user to inject javascript during a browser session...

6.1CVSS6.3AI score0.00495EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/10 5:42 p.m.•14 views

CVE-2021-32005

Cross-site Scripting XSS vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions...

5.4CVSS5.8AI score0.00592EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/10 5:42 p.m.•8 views

CVE-2021-32006

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

5CVSS6.1AI score0.0064EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/10 5:42 p.m.•13 views

CVE-2021-32006

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

4.3CVSS5.8AI score0.0064EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/10 5:42 p.m.•27 views

CVE-2021-32005

Cross-site Scripting XSS vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions...

6.5CVSS0.00592EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/10 5:42 p.m.•28 views

CVE-2021-32006

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

5CVSS0.0064EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/10 5:42 p.m.•23 views

Design/Logic Flaw

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

4CVSS4.6AI score0.0064EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/03/10 5:42 p.m.•24 views

Cross site scripting

Cross-site Scripting XSS vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions...

3.5CVSS5.3AI score0.00592EPSS
SaveExploits0References1Affected Software9
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•13 views

Secomea SiteManager 跨站脚本漏洞

Secomea SiteManager is a software application from the Danish company Secomea. It provides a remote maintenance function for industrial equipment. A cross-site scripting vulnerability exists in Secomea SiteManager Version 9.6.621421014 and earlier versions, which allows a user to store javascript...

6.5CVSS5.5AI score0.00592EPSS
SaveExploits0References2
Rows per page
Query Builder