Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-13124

Malware in sbrugna...

6.1CVSS5.6AI score0.00965EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-57766

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00308EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.6 views

The vulnerability of the SMC Downloads function in the Forcepoint NGFW Security Management Center web application allows attackers to execute cross-site scripting attacks.

The vulnerability of the SMC Downloads function in the Forcepoint NGFW Security Management Center web application relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks...

6.4CVSS6.2AI score0.00308EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/03/04 4:15 p.m.16 views

CVE-2023-5451

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Next...

6.1CVSS6.2AI score0.00308EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/04 3:54 p.m.16 views

CVE-2023-5451

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Next...

6.1CVSS6.5AI score0.00308EPSS
Exploits0References1
CVE
CVE
added 2024/03/04 3:54 p.m.50 views

CVE-2023-5451

The issue is a Reflected XSS vulnerability in Forcepoint Next Generation Firewall Security Management Center (SMC Downloads feature). Affects NGFW SMC downloads path, with improper neutralization of input during web page generation. Impact is reflected XSS that could affect users visiting crafted...

6.1CVSS6.2AI score0.00308EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/04 3:54 p.m.7 views

CVE-2023-5451

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Next...

6.1CVSS6.9AI score0.00308EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/04 12:0 a.m.6 views

PT-2024-2602 · Forcepoint · Forcepoint Next Generation Firewall Security Management Center

Name of the Vulnerable Software and Affected Versions: Forcepoint Next Generation Firewall Security Management Center versions prior to 6.10.13 Forcepoint Next Generation Firewall Security Management Center versions 6.11.0 through 7.1.2 Description: The issue is related to improper neutralization...

6.4CVSS6.2AI score0.00308EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/04 12:0 a.m.6 views

Forcepoint Next Generation Firewall Security Vulnerability

Forcepoint Next Generation Firewall NGFW is a next-generation firewall product from Forcepoint Corporation. A security vulnerability exists in Forcepoint Next Generation Firewall Security Management Center versions prior to 6.10.13, 6.11.0 through 7.1.2, which stems from the presence of a reflect...

6.1CVSS6AI score0.00308EPSS
Exploits0References3
OSV
OSV
added 2019/12/23 8:15 p.m.5 views

CVE-2019-6147

Forcepoint NGFW Security Management Center SMC versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next...

5.9CVSS6.2AI score0.00703EPSS
Exploits0References1
OSV
OSV
added 2019/07/25 3:15 p.m.2 views

CVE-2019-3486

Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1...

6.1CVSS5.3AI score0.00965EPSS
Exploits0References1
Prion
Prion
added 2019/07/25 3:15 p.m.11 views

Cross site scripting

Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1...

4.3CVSS5.9AI score0.00965EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/07/25 2:30 p.m.43 views

CVE-2019-3486

CVE-2019-3486 affects Micro Focus ArcSight Security Management Center (ArcMC). A stored cross-site scripting vulnerability stems from insufficient validation of client-side data in the WEB application, leading to potential client-side code execution in ArcMC versions prior to 2.9.1. The affected ...

6.1CVSS5.2AI score0.00965EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/06 12:0 a.m.5 views

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s...

4.3CVSS5.7AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/06 12:0 a.m.20 views

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...

4.3CVSS5.7AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/06 12:0 a.m.22 views

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...

4.3CVSS5.7AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/06 12:0 a.m.5 views

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool allows a hacker to gain access to protected information.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool is related to deficiencies in the document export mechanism. Exploiting this vulnerability allows a malicious actor to obtain information about the installed components of the...

4.3CVSS5.5AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/06 12:0 a.m.6 views

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool allows a hacker to gain access to protected information.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the installed...

4.3CVSS5.5AI score
Exploits0Affected Software1
Rows per page
Query Builder