Lucene search
+L

1540 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:31 a.m.19 views

Security Bulletin: Sterling External Authentication Server Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software5
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:31 a.m.24 views

Security Bulletin: InfoSphere Guardium Data Redaction Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:29 a.m.24 views

Security Bulletin: WebSphere Application Server Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:29 a.m.43 views

Security Bulletin: Maximo Asset Management Java API Documentation Frame Injection Vulnerability

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.28 views

Security Bulletin: IBM DB2 Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.67 views

Security Bulletin: IBM Sterling Control Center Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.46 views

Security Bulletin: Informix JDBC Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation which injects...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.20 views

Security Bulletin: IBM Tivoli Directory Integrator for z/OS (TDI) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TDI contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.60 views

Security Bulletin: IBM Records Manager Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.33 views

Security Bulletin: IBM Support Assistant Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.22 views

Security Bulletin: IBM Tivoli Directory Integrator (TDI) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TDI contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.19 views

Security Bulletin: IBM WebSphere Business Services Fabric Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.18 views

Security Bulletin: WebSphere Dashboard Framework Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS CVEID: CVE-2013-1571 DESCRIPTION HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.3AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.20 views

Security Bulletin: IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract The Java API documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation that...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.22 views

Security Bulletin: WebSphere Dynamic Process Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
Veracode
Veracode
added 2022/09/16 7:48 a.m.10 views

Improper Verification Of Cryptographic Signatures

tuf improperly verifies cryptographic signatures. The vulnerability exists because the verifyrootselfsigned function of updater.py does not properly verify self-signatures for new root metadata with multiple signatures having the same keyid which allows an attacker to bypass the intended signatur...

3.6AI score
SaveExploits0
Cvelist
Cvelist
added 2022/09/12 8:00 p.m.46 views

CVE-2022-36102 Acess control list bypassed via crafted specific URLs

Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Users are advised to update to the current version 5.7.15. Users ca...

6.3CVSS7.2AI score0.00649EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
added 2022/08/22 11:38 a.m.27 views

Hyundai Uses Example Keys for Encryption System

This is a dumb crypto mistake I had not previously encountered: A developer says it was possible to run their own software on the car infotainment hardware after discovering the vehicles manufacturer had secured its system using keys that were not only publicly known but had been lifted from...

0.2AI score
SaveExploits0
OSV
OSV
added 2022/08/08 2:15 p.m.8 views

CVE-2022-2355

The Easy Username Updater WordPress plugin before 1.0.5 does not implement CSRF checks, which could allow attackers to make a logged in admin change any user's username includes the admin...

6.5CVSS5.8AI score0.0037EPSS
SaveExploits2References1
NVD
NVD
added 2022/08/08 2:15 p.m.20 views

CVE-2022-2355

The Easy Username Updater WordPress plugin before 1.0.5 does not implement CSRF checks, which could allow attackers to make a logged in admin change any user's username includes the admin...

6.5CVSS0.0037EPSS
SaveExploits2References1
Rows per page
Query Builder