Lucene search
+L

1326 matches found

HackRead
HackRead
added 2019/12/03 1:18 p.m.37 views

Step-by-Step Guide to Creating the Best Web Pages

By Uzair Amir Everyone knows that your site design and content can be the difference between success and failure... This is a post from HackRead.com Read the original post: Step-by-Step Guide to Creating the Best Web Pages...

1.9AI score
SaveExploits0
CNVD
CNVD
added 2019/12/03 12:0 a.m.7 views

IBM Cloud Pak System Platform System Manager Information Disclosure Vulnerability

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. The product supports deploying, managing and moving application environments across hybrid clouds. An information disclosure vulnerability exists in Platform System Manager in I...

4CVSS5.8AI score0.00316EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/27 12:0 a.m.7 views

Google Chrome Omnibox Content Spoofing Vulnerability

Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. The vulnerability stems from insufficient validation of untrustworthy input by the navigation in Chrome. A remote attacker can exploit the vulnerability to spoof the...

4.3CVSS8.4AI score0.00604EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/20 12:0 a.m.5 views

IBM WebSphere eXtreme Scale Admin Console Information Disclosure Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The product supports dynamic caching, partitioning, replication, and management of application data and business logic across multiple servers.Admin Console is one of the management console programs. An information...

4CVSS6.2AI score0.0034EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/18 12:0 a.m.7 views

Centraleyezer File Upload Vulnerability (CNVD-2020-03038)

Centraleyezer is a vulnerability tracking and management platform. The platform is used for vulnerability reporting, prioritization, escalation and tracking of vulnerabilities. A file upload vulnerability exists in Centraleyezer On Premises. An attacker can exploit this vulnerability to upload HT...

6.1CVSS7.2AI score0.01054EPSS
SaveExploits1References1
Fedora
Fedora
added 2019/11/03 12:13 a.m.64 views

[SECURITY] Fedora 30 Update: php-7.3.11-1.fc30

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS0.4AI score0.99407EPSS
SaveExploits56
Fedora
Fedora
added 2019/10/31 12:59 a.m.60 views

[SECURITY] Fedora 31 Update: php-7.3.11-1.fc31

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS0.4AI score0.99407EPSS
SaveExploits56
CNVD
CNVD
added 2019/10/28 12:0 a.m.6 views

Google Chrome URL Spoofing Vulnerability (CNVD-2019-38248)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 78.0.3904.70, which stems from the program not properly handling user-submitted data. A remote attacker can exploit the vulnerability to spoof URLs with the help of...

4.3CVSS8.5AI score0.0092EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/23 1:15 p.m.21 views

CVE-2019-10475

A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin...

6.1CVSS5.9AI score0.57735EPSS
SaveExploits5References3
Prion
Prion
added 2019/10/23 1:15 p.m.25 views

Cross site scripting

A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin...

4.3CVSS5.9AI score0.57735EPSS
SaveExploits5References3Affected Software1
RedhatCVE
RedhatCVE
added 2019/10/08 11:12 a.m.28 views

CVE-2019-1003042

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin...

6.1CVSS3.8AI score0.01372EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.7 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

5.5CVSS5.5AI score0.01699EPSS
SaveExploits0References2
OSV
OSV
added 2019/09/30 4:15 p.m.6 views

CVE-2019-4112

IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105...

3.3CVSS5.9AI score0.0034EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2019/09/30 12:0 a.m.6 views

PT-2019-16903 · Ibm · Ibm Websphere Extreme Scale

Name of the Vulnerable Software and Affected Versions: IBM WebSphere eXtreme Scale version 8.6 Description: The issue allows web pages to be stored locally, which can then be read by another user on the system, potentially leading to information disclosure. Recommendations: For IBM WebSphere...

4CVSS4.1AI score0.0034EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/09/28 12:0 a.m.23 views

Fedora Update for varnish FEDORA-2019-8a85a90af6

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.6AI score0.05789EPSS
SaveExploits0References2
NVD
NVD
added 2019/08/30 9:15 a.m.18 views

CVE-2019-12754

Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting XSS exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users or potentially bypass access controls such as...

4.8CVSS5AI score0.00629EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/08/27 12:0 a.m.6 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted document or web page...

5.5CVSS5.4AI score0.01661EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/22 12:0 a.m.8 views

The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code and gain control over the vulnerable system.

The vulnerability of the Windows operating system’s font library relates to errors in processing specially created embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain control over the vulnerable system through a specially created web...

9.3CVSS5.9AI score0.13904EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2019/08/22 12:0 a.m.13 views

The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code and gain control over the vulnerable system.

The vulnerability of the Windows operating system’s font library relates to errors in processing specially created embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain control over the vulnerable system through a specially created web...

9.3CVSS5.9AI score0.15493EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:0 a.m.5 views

The vulnerability of Firefox ESR, Firefox, and the email client Thunderbird exists due to insufficient checking of parameters in messages from the child process to the parent process. This allows a malicious actor to execute arbitrary code.

The vulnerability of Firefox ESR, Firefox, and the email client Thunderbird exists due to insufficient checking of parameters in messages from the child process to the parent process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by causing...

10CVSS8.2AI score0.55874EPSS
SaveExploits11References11Affected Software7
Rows per page
Query Builder