Lucene search
+L

2783 matches found

CNNVD
CNNVD
added 2021/01/12 12:0 a.m.8 views

Siemens Jt2go和Siemens Teamcenter Visualization 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments.The software gives business users access to documents in a...

8.8CVSS7.6AI score0.02091EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.12 views

Siemens Jt2go和Siemens Teamcenter Visualization 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT. VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments by enabling business users to access documents, 2D drawings...

8.8CVSS7.5AI score0.04297EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.8 views

Siemens Jt2go和Siemens Teamcenter Visualization 代码问题漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT. VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments by enabling business users to access documents, 2D drawings...

6.5CVSS6.4AI score0.02586EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.14 views

Siemens Jt2go和Siemens Teamcenter Visualization 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, and PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments with software that gives business users access to...

7.8CVSS7.4AI score0.02833EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.10 views

Siemens Jt2go 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments.The software gives business users access to documents in a...

7.8CVSS7.4AI score0.01581EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.10 views

Siemens Jt2go和Siemens Teamcenter Visualization 缓冲区错误漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT. VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments by enabling business users to access documents, 2D drawings...

8.8CVSS7.5AI score0.04297EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2020/12/30 11:52 p.m.113 views

Exploit for Cross-site Scripting in Redhat Keycloak

reconFTW...

6.1CVSS8.8AI score0.37246EPSS
SaveExploits5
OSV
OSV
added 2020/12/30 11:15 p.m.19 views

CVE-2020-26296

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially crafted Vega expression, an attacker could execut...

8.7CVSS6.6AI score
SaveExploits0References5
NVD
NVD
added 2020/12/30 11:15 p.m.32 views

CVE-2020-26296

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially crafted Vega expression, an attacker could execut...

8.7CVSS8.4AI score0.01693EPSS
SaveExploits0References5
Prion
Prion
added 2020/12/30 11:15 p.m.15 views

Format string

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially crafted Vega expression, an attacker could execut...

3.5CVSS8.4AI score0.01693EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2020/12/30 11:10 p.m.112 views

CVE-2020-26296

CVE-2020-26296 concerns a cross-site scripting (XSS) vulnerability in the Vega visualization library used in the npm package, present in Vega before version 5.17.3. The vulnerability arises from specially crafted Vega expressions that could cause arbitrary JavaScript execution on a victim’s machi...

8.7CVSS8.4AI score0.01693EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2020/12/30 11:10 p.m.39 views

CVE-2020-26296 XSS in Vega

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially crafted Vega expression, an attacker could execut...

8.7CVSS8.4AI score0.01693EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2020/12/21 11:30 a.m.68 views

Watcher - Open Source Cybersecurity Threat Hunting Platform

Watcher is a Django & React JS automated platform for discovering new potentially cybersecurity threats targeting your organisation. It should be used on webservers and available on Docker. Watcher capabilities Detect emerging vulnerability, malware using social network & other RSS sources...

7.3AI score
SaveExploits0References11
CNNVD
CNNVD
added 2020/12/18 12:0 a.m.8 views

Tangro Business Workflow Security Vulnerability

Tangro Business Workflow is a software from the German company Tangro that allows you to visualize the internal control and approval processes of SAP document content. A security vulnerability exists in tangro Business Workflow before 1.18.1, which can be exploited to manipulate documents attache...

4.3CVSS5.8AI score0.00574EPSS
SaveExploits1References3
Akamai Blog
Akamai Blog
added 2020/12/07 2:0 p.m.96 views

Add Security Events to Your Monitoring Tools

Real-time monitoring is important in every organization because it enables stakeholders to understand what is happening at any given time and react quickly. There are a lot of systems and devices we can and should monitor using tools such as application performance monitoring, digital performance...

0.4AI score
SaveExploits0
Kitploit
Kitploit
added 2020/11/17 11:30 a.m.52 views

Gping - Ping, But With A Graph

Ping, but with a graph. Install FYI: The old Python version can be found under the python tag. Homebrew MacOS + Linux brew tap orf/brew brew install gping Binaries Windows Download the latest release from the github releases page. Extract it and move it to a directory on your PATH. Cargo cargo...

7AI score
SaveExploits0References3
Rapid7 Blog
Rapid7 Blog
added 2020/11/10 1:54 p.m.39 views

Visualizing Network Traffic Data to Drive Action

Top 5 multi group queries for analyzing network sensor data We launched the Insight Network Sensor earlier this year and have since seen great adoption from both new and existing customers. The main use case behind this success is the need for network visibility. Customers want to know what is...

7AI score
SaveExploits0
FireEye
FireEye
added 2020/10/28 3:30 p.m.194 views

Welcome to ThreatPursuit VM: A Threat Intelligence and Hunting Virtual Machine

Skilled adversaries can deceive detection and often employ new measures in their tradecraft. Keeping a stringent focus on the lifecycle and evolution of adversaries allows analysts to devise new detection mechanisms and response processes. Access to the appropriate tooling and resources is critic...

0.3AI score
SaveExploits0References45
Kitploit
Kitploit
added 2020/10/25 11:30 a.m.189 views

Manuka - A Modular OSINT Honeypot For Blue Teamers

Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked credentials, and trac...

7.4AI score
SaveExploits0References1
CNVD
CNVD
added 2020/10/22 12:0 a.m.8 views

lightning-server cross-site scripting vulnerability

lightning-server is a personal developer Npm library for data visualization applications . The library provides API-based access to reproducible Web-based interactive visualizations. A security vulnerability exists in all versions of lightning-server, which can be exploited by an attacker to inje...

6.3CVSS7AI score0.0086EPSS
SaveExploits1References1
Rows per page
Query Builder