Lucene search
+L

27 matches found

Cvelist
Cvelist
•added 2021/05/07 3:52 a.m.•29 views

CVE-2021-32090

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

9.8AI score0.02113EPSS
SaveExploits1References2
CVE
CVE
•added 2021/05/07 3:52 a.m.•87 views

CVE-2021-32091

CVE-2021-32091 is a Cross-site Scripting (XSS) vulnerability in StackLift LocalStack 0.12.6. According to CNVD-2021-34109, it stems from a lack of proper validation of client-side data by the WEB application, enabling execution of client-side code. Other connected sources consistently describe th...

6.1CVSS6AI score0.00846EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/05/07 3:52 a.m.•27 views

CVE-2021-32091

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

6.2AI score0.00846EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/07 12:00 a.m.•3 views

CVE-2021-32090: Improper Neutralization of Special Elements used in an OS Command

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

10CVSS5.9AI score0.02113EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/05/07 12:00 a.m.•16 views

StackLift LocalStack 跨站脚本漏洞

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A cross-site scripting vulnerability exists in StackLift LocalStack version 0.12.6, which stems from a lack of proper validation of client-side data by the WEB applicatio...

6.1CVSS5.4AI score0.00846EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/07 12:00 a.m.•2 views

CVE-2021-32091: Improper Neutralization of Input During Web Page Generation

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

6.1CVSS5.7AI score0.00846EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/05/07 12:00 a.m.•18 views

StackLift LocalStack 命令注入漏洞

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...

10CVSS6AI score0.02113EPSS
SaveExploits1References3
Rows per page
Query Builder