Lucene search
+L

7458 matches found

NVD
NVD
•added 2018/07/31 1:29 p.m.•27 views

CVE-2018-1718

IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.0123EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/07/31 1:00 p.m.•42 views

CVE-2018-1718

IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.0123EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/07/31 12:00 a.m.•5 views

PT-2018-13939

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2.0.1 through 5.2.6.3 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

5.4CVSS0.0123EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/31 12:00 a.m.•6 views

CVE-2018-1718: Improper Neutralization of Input During Web Page Generation

IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.8AI score0.0123EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/07/26 12:00 a.m.•2907 views

Hashicorp Consul Web UI and API access

A remote, unauthenticated attacker may able to access Consul Web UI and API to gather data, register services and gain remote access. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid111351; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

5.5AI score
SaveExploits0References2
CNVD
CNVD
•added 2018/07/24 12:00 a.m.•22 views

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2018-13986)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

5.4CVSS5.4AI score0.0294EPSS
SaveExploits4References1
NVD
NVD
•added 2018/07/23 1:29 p.m.•31 views

CVE-2018-1513

IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

5.4CVSS5.2AI score0.0294EPSS
SaveExploits4References4
Cvelist
Cvelist
•added 2018/07/23 1:00 p.m.•41 views

CVE-2018-1513

IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

5.4CVSS5.2AI score0.0294EPSS
SaveExploits4References4
OpenVAS
OpenVAS
•added 2018/07/23 12:00 a.m.•186 views

Swarmpit UI Detection

Detection of Swarmpit Web UI. The script sends a connection request to the server and attempts to detect Swarmpit UI and to extract its version if possible. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/23 12:00 a.m.•7 views

CVE-2018-1513: Improper Neutralization of Input During Web Page Generation

IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

5.4CVSS5.8AI score0.0294EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2018/07/23 12:00 a.m.•4 views

PT-2018-12887

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2.0 through 5.2.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosur...

5.4CVSS0.0294EPSS
SaveExploits4References6
Kitploit
Kitploit
•added 2018/07/22 2:30 p.m.•24 views

Hindsight - Internet History Forensics For Google Chrome/Chromium

Hindsight is a free tool for analyzing web artifacts. It started with the browsing history of the Google Chrome web browser and has expanded to support other Chromium-based applications with more to come!. Hindsight can parse a number of different types of web artifacts, including URLs, download...

7.2AI score
SaveExploits0References1
Prion
Prion
•added 2018/07/20 4:29 p.m.•18 views

Cross site scripting

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

3.5CVSS5.2AI score0.02837EPSS
SaveExploits5References4Affected Software2
Cvelist
Cvelist
•added 2018/07/20 4:00 p.m.•50 views

CVE-2018-1563

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

5.4CVSS5.2AI score0.02837EPSS
SaveExploits5References4
CNVD
CNVD
•added 2018/07/20 12:00 a.m.•12 views

IBM Rational Rhapsody Design Manager and IBM Rational Software Architect Design Manager Cross-Site Scripting Vulnerabilities

IBM Rational Rhapsody Design Manager is collaborative design management software built on the IBM Jazz platform that helps design team members and stakeholders share, track, review, and manage designs.IBM Rational Software Architect Design Manager is a IBM Rational Software Architect Design Manag...

5.4CVSS5.4AI score0.00666EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/07/20 12:00 a.m.•17 views

Mesoshpere Marathon UI Detection

Detection of Mesosphere Marathon Web UI. The script sends a connection request to the server and attempts to detect Mesoshpere Marathon UI and to extract its version if possible. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/07/20 12:00 a.m.•3 views

PT-2018-13122

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 2.2.0 through 2.2.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosur...

5.4CVSS0.02837EPSS
SaveExploits5References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/20 12:00 a.m.•4 views

CVE-2018-1563: Improper Neutralization of Input During Web Page Generation

IBM Sterling B2B Integrator Standard Edition IBM Sterling File Gateway 2.2.0 through 2.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

5.4CVSS5.8AI score0.02837EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2018/07/20 12:00 a.m.•24 views

Mesosphere Marathon Web UI Public WAN (Internet) / Public LAN Accessible

The script checks if the Mesosphere Marathon Web UI is accessible from a public WAN Internet / public LAN. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.2AI score
SaveExploits0References1
CNVD
CNVD
•added 2018/07/20 12:00 a.m.•21 views

IBM Rational DOORS Next Generation and IBM Rational Requirements Composer Cross-Site Scripting Vulnerabilities

IBM Rational DOORS Next Generation DNG and Rational Requirements Composer RRC are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IB...

5.4CVSS5.5AI score0.00968EPSS
SaveExploits0References1
Rows per page
Query Builder