Lucene search
+L

2837 matches found

Veracode
Veracode
added 2019/05/16 3:25 a.m.28 views

Denial Of Service (DoS)

.NET Core is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown code block of the component Web Request Handler when ASP.NET Core improperly handles web requests causing an application crash impacting availability...

7.5CVSS7.2AI score0.09611EPSS
SaveExploits0References6Affected Software6
CNVD
CNVD
added 2019/05/16 12:0 a.m.5 views

Microsoft .NET Framework and .NET Core Denial of Service Vulnerability (CNVD-2019-14683)

NET Framework and .NET Core are both products of Microsoft Corporation.Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building applications for Windows, Windows Store, Windows Server, and Microsoft Azure. NET Framework is a comprehensive...

7.5CVSS7.4AI score0.04943EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/05/15 12:0 a.m.40 views

Microsoft SharePoint Spoofing Vulnerability (CNVD-2019-39029)

Microsoft SharePoint is a browser-based collaboration and document management platform. A spoofing vulnerability exists in Microsoft SharePoint. An attacker could exploit this vulnerability by sending a specially crafted web request to conduct a cross-site scripting attack, which could run script...

5.7CVSS6.1AI score0.02461EPSS
SaveExploits0References1
OSV
OSV
added 2019/05/10 3:29 p.m.3 views

CVE-2018-1990

IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283...

5.3CVSS5.8AI score0.02279EPSS
SaveExploits0References3
Fedora
Fedora
added 2019/05/10 12:48 a.m.32 views

[SECURITY] Fedora 30 Update: rubygem-actionpack-5.2.3-2.fc30

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

9.8CVSS1.3AI score0.98507EPSS
SaveExploits30
OpenVAS
OpenVAS
added 2019/05/10 12:0 a.m.76 views

Fedora Update for rubygem-actionpack FEDORA-2019-1cfe24db5c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.98507EPSS
SaveExploits30References4
CNVD
CNVD
added 2019/05/06 12:0 a.m.5 views

IBM Cúram Social Program Management Cross-Site Request Forgery Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A cross-site request forgery vulnerability exists in IBM Cúram SPM, which arises from a WEB application that does not...

8.8CVSS6.8AI score0.00527EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/23 6:29 p.m.26 views

CVE-2019-11076

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...

9.8CVSS9.7AI score0.03512EPSS
SaveExploits1References2
Prion
Prion
added 2019/04/23 6:29 p.m.14 views

Cross site request forgery (csrf)

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...

7.5CVSS9.6AI score0.03512EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/04/23 5:32 p.m.20 views

CVE-2019-11076

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...

9.7AI score0.03512EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.10 views

The vulnerability of the ASP.NET Core software platform, related to errors in handling web requests, allows attackers to cause service failures.

The vulnerability of the ASP.NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow an attacker to cause service interruptions through specially crafted web requests...

7.5CVSS7.2AI score0.06972EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2019/04/10 12:0 a.m.6 views

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2019-13859)

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core...

7.5CVSS6.5AI score0.06972EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/09 9:29 p.m.28 views

CVE-2019-0830

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831...

5.4CVSS5AI score0.01571EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/09 9:29 p.m.3 views

CVE-2019-0830

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831...

5.4CVSS6.3AI score0.01571EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/09 9:29 p.m.18 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830...

3.5CVSS5AI score0.01571EPSS
SaveExploits0References1Affected Software3
Prion
Prion
added 2019/04/09 9:29 p.m.17 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831...

3.5CVSS5AI score0.01571EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2019/04/09 8:16 p.m.4 views

CVE-2019-0831

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830...

5AI score0.01571EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/04/09 8:16 p.m.7 views

CVE-2019-0830

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831...

5AI score0.01571EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/09 3:29 a.m.30 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

3.5CVSS5.2AI score0.01652EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2019/04/09 3:29 a.m.36 views

CVE-2019-0778

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

5.4CVSS5.3AI score0.01652EPSS
SaveExploits0References1
Rows per page
Query Builder