CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

176 matches found

Positive Technologies•added 2020/06/24 12:00 a.m.•2 views

PT-2020-13844

Name of the Vulnerable Software and Affected Versions Navigate CMS version 2.9 r1433 Description The issue is related to a stored XSS that is executed on the pages for viewing and editing users. This is present in both the User field and the E-Mail field. On the Edit user page, the XSS is trigger...

6.1CVSS0.00934EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2020/06/24 12:00 a.m.•6 views

CVE-2020-14018: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to view users, and on the page to edit users. This is present in both the User field and the E-Mail field. On the Edit user page, the XSS is only triggered via the E-Mail field;...

6.1CVSS5.8AI score0.00934EPSS

SaveExploits1References2

OSV•added 2019/08/15 6:15 p.m.•63 views

UBUNTU-CVE-2018-14668

In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "defaultdatabase" fields which led to Cross Protocol Request Forgery Attacks...

8.8CVSS5.9AI score0.00716EPSS

SaveExploits0References3

Packet Storm•added 2019/08/12 12:00 a.m.•237 views

Joomla JS Support Ticket 1.1.6 Arbitrary File Deletion

Exploit Title: Joomla! component comjssupportticket - Authenticated Arbitrary File Deletion Dork: inurl:"index.php?option=comjssupportticket" Date: 10.08.19 Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link: https://www.joomsky.com/46/download/1.html Version: 1.1.6...

0.2AI score

SaveExploits0

exploitpack•added 2019/08/12 12:00 a.m.•46 views

Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 - ticket.php Arbitrary File Deletion

Joomla! Component JS Support Ticket comjssupportticket 1.1.6 - ticket.php Arbitrary File Deletion Exploit Title: Joomla! component comjssupportticket - Authenticated Arbitrary File Deletion Dork: inurl:"index.php?option=comjssupportticket" Date: 10.08.19 Exploit Author: qw3rTyTy Vendor Homepage:...

SaveExploits0

Exploit DB•added 2019/08/12 12:00 a.m.•220 views

Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 - 'ticket.php' Arbitrary File Deletion

5.3AI score

SaveExploits0

Prion•added 2019/04/22 4:29 p.m.•22 views

Cross site scripting

Persistent cross-site scripting XSS in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during an...

4.3CVSS6.4AI score0.02414EPSS

SaveExploits1References8Affected Software4

Veracode•added 2019/02/07 2:02 a.m.•35 views

Cross-site Scripting (XSS)

modx/revolution is vulnerable to cross-site scripting XSS. The vulnerability exists through an extended user field such as Container name or Attribute name, allowing XSS attacks...

6.1CVSS5.7AI score0.00857EPSS

SaveExploits1References3Affected Software1

Prion•added 2019/02/06 5:29 p.m.•28 views

Design/Logic Flaw