Lucene search
+L

87 matches found

OSV
OSV
added 2020/05/13 7:15 p.m.9 views

CVE-2020-2013

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama versio...

8.8CVSS7.3AI score0.00639EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/14 8:15 p.m.14 views

CVE-2020-7575

A vulnerability has been identified in Climatix POL908 BACnet/IP module All versions, Climatix POL909 AWM module All versions V11.32. A persistent cross-site scripting XSS vulnerability exists in the web server access log page of the affected devices that could allow an attacker to inject arbitra...

6.1CVSS5.8AI score0.00662EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/01 5:15 p.m.4 views

DEBIAN-CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS7.7AI score0.01806EPSS
SaveExploits0References1
OSV
OSV
added 2019/05/16 3:29 p.m.12 views

CVE-2018-1975

IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

5.4CVSS5.4AI score0.00673EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2018/08/30 4:29 p.m.4 views

CVE-2016-0234

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. IBM X-Force ID: 110303...

4CVSS5.5AI score0.00328EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2016/11/24 7:59 p.m.8 views

CVE-2016-0353

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

3.7CVSS5.8AI score0.00877EPSS
SaveExploits0References2
CERT
CERT
added 2003/06/04 12:00 a.m.36 views

Sun Ray Smartcard reader may leave desktop session open when card is quickly removed

Overview The Sun Ray Smartcard reader fails to properly detect a "quick removal, reinsertion and removal of a Smartcard." Description The Sun Ray is a thin client computing device designed to process user input and output, and provide access to computing services hosted by a server. Authenticatio...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder