Lucene search
+L

12583 matches found

Citrix
Citrix
added 2023/07/13 12:00 a.m.28 views

Unable to login to Citrix Cloud - Error: "incorrect username, password or token"

Unable to login to Citrix Cloud to access virtualized app. The error message "incorrect username, password or token" is displayed. The process of setting up MFA works perfectly, but once Authenticator App is paired and actual login attempted, it always fails...

7.2AI score
SaveExploits0
OSV
OSV
added 2023/07/12 5:15 p.m.12 views

CVE-2023-3642

A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument...

6.1CVSS3.9AI score0.0045EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/12 5:15 p.m.22 views

Cross site scripting

A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument...

5CVSS6AI score0.0045EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.15 views

GZ Scripts Vacation Rental Website 跨站脚本漏洞

GZScripts is a script from GZScripts, Inc. A cross-site scripting vulnerability exists in GZ Scripts Vacation Rental Website version 1.8, which stems from the parameter username/title/comment in the file /VacationRentalWebsite/property/8/ad-has-principes/ that can result in cross-site scripting...

6.1CVSS4.2AI score0.0045EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/12 12:00 a.m.11 views

PT-2023-25571 · Gz Scripts · Gz Scripts Vacation Rental Website

Name of the Vulnerable Software and Affected Versions: GZ Scripts Vacation Rental Website version 1.8 Description: A vulnerability was found in the HTTP POST Request Handler component, affecting some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/. The...

6.1CVSS4.7AI score0.0045EPSS
SaveExploits0References5
Citrix
Citrix
added 2023/07/12 12:00 a.m.16 views

Published apps and desktop shows error "The user name and password is incorrect"

The user name or password is incorrect at System.Security.Principal.WindowsIdentity.KerbS4ULogonString upn, SafeAccessTokenHandle& safeTokenHandle at System.Security.Principal.WindowsIdentity..ctorString sUserPrincipalName, String type at System.Security.Principal.WindowsIdentity..ctorString...

7.3AI score
SaveExploits0
OSV
OSV
added 2023/07/11 3:15 p.m.13 views

CVE-2023-3617

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...

9.8CVSS5.7AI score0.00819EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.11 views

Best pos management system SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which stems from the parameter username in the file adminclass.php that can lead to sql injection...

9.8CVSS7.6AI score0.00819EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.4 views

PT-2023-3962

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018u16 and earlier Adobe ColdFusion versions 2021u6 and earlier Adobe ColdFusion versions 2023.0.0.330468 and earlier Description The issue is related to an Improper Access Control vulnerability that could result in ...

10CVSS7.5AI score0.99798EPSS
SaveExploits0References24
ATTACKERKB
ATTACKERKB
added 2023/07/10 4:15 p.m.9 views

CVE-2023-35698

Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt...

5.3CVSS6.1AI score0.00785EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/07/10 12:00 a.m.10 views

PT-2023-25281 · Sick · Sick Icr890-4

Name of the Vulnerable Software and Affected Versions: SICK ICR890-4 affected versions not specified Description: The issue concerns an observable response discrepancy that could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login...

5.3CVSS5.1AI score0.00785EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/10 12:00 a.m.13 views

The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress management systems arises from the failure to properly neutralize special elements in LDAP requests. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress content management systems is related to the lack of measures taken to neutralize special elements in LDAP requests when processing the username parameter. Exploiting this vulnerability can allow an attack...

9CVSS7.3AI score0.00532EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/07/07 1:15 p.m.14 views

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

5.4CVSS5.8AI score0.01875EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/07/07 1:15 p.m.7 views

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

5.4CVSS6AI score0.01875EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/07 1:15 p.m.31 views

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

5.4CVSS5.3AI score0.01875EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/07 12:00 a.m.9 views

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

5.9AI score0.01875EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/07 12:00 a.m.37 views

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

5.4AI score0.01875EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/07 12:00 a.m.16 views

Zoho ManageEngine ADAudit Plus 跨站脚本漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, prove compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7100 that stems from a cross-site scripting attack via the username field...

5.4CVSS5.3AI score0.01875EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/06 4:15 p.m.31 views

CVE-2023-30319

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

9.6CVSS8.6AI score0.00888EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/06 4:15 p.m.10 views

CVE-2023-30319

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

9.6CVSS6AI score0.00888EPSS
SaveExploits1References2
Rows per page
Query Builder