Lucene search
+L

193 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:39 a.m.6 views

SUSE CVE-2013-2131

Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service crash via format string specifiers to the rrdtool.graph function...

5CVSS6.8AI score0.1059EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/01 9:15 a.m.16 views

CVE-2018-25063

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting...

6.1CVSS6.2AI score
SaveExploits0References5
NVD
NVD
added 2023/01/01 9:15 a.m.27 views

CVE-2018-25063

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting...

6.1CVSS4.5AI score0.0053EPSS
SaveExploits0References5
Prion
Prion
added 2023/01/01 9:15 a.m.78 views

Cross site scripting

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting...

5.8CVSS6.1AI score0.0053EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2023/01/01 8:32 a.m.25 views

CVE-2018-25063 Zenoss Dashboard defaultportlets.js cross site scripting

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting...

4CVSS6.1AI score0.0053EPSS
SaveExploits0References5
CVE
CVE
added 2023/01/01 8:32 a.m.75 views

CVE-2018-25063

The CVE-2018-25063 issue affects Zenoss Dashboard up to version 1.3.4, caused by an XSS vulnerability in ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js where manipulating the HTMLString argument enables cross-site scripting. The vulnerability can be triggered remotely. Remediat...

6.1CVSS4.8AI score0.0053EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/01 12:0 a.m.8 views

PT-2023-10804 · Zenoss · Zenoss Dashboard

Name of the Vulnerable Software and Affected Versions: Zenoss Dashboard versions up to 1.3.4 Description: A vulnerability was found in an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the HTMLString argument leads to...

6.1CVSS4.3AI score0.0053EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/01/01 12:0 a.m.11 views

Zenoss 跨站脚本漏洞

Zenoss is the United States Zenoss company's set of open source enterprise-class IT management and monitoring software. The software provides event management, network service monitoring, host resource monitoring and network device availability monitoring and other functions. A cross-site scripti...

6.1CVSS4.8AI score0.0053EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2020/03/02 12:0 a.m.61 views

Debian: Security Advisory (DLA-2131-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.07247EPSS
SaveExploits0References3
Debian
Debian
added 2020/03/01 8:41 p.m.139 views

[SECURITY] [DLA 2131-1] rrdtool security update

Package : rrdtool Version : 1.4.8-1.2+deb8u1 CVE ID : CVE-2014-6262 Multiple format string vulnerabilities in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argume...

7.5CVSS7.9AI score0.1059EPSS
SaveExploits1
OSV
OSV
added 2020/02/12 2:15 a.m.9 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8AI score
SaveExploits0References13
OSV
OSV
added 2020/02/12 2:15 a.m.7 views

DEBIAN-CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8AI score0.07247EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/12 2:15 a.m.33 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8AI score0.07247EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2020/02/12 2:15 a.m.32 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS7.4AI score0.07247EPSS
SaveExploits0References4
OSV
OSV
added 2020/02/12 2:15 a.m.9 views

UBUNTU-CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS6.2AI score0.07247EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2020/02/12 1:30 a.m.48 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

7.5CVSS8.1AI score0.07247EPSS
SaveExploits0
CVE
CVE
added 2020/02/12 1:30 a.m.115 views

CVE-2014-6262

CVE-2014-6262 describes multiple format string vulnerabilities in the Python RRDtool module used by Zenoss Core (before 4.2.5) and other products. An attacker can exploit a crafted third argument to rrdtool.graph to execute arbitrary code or cause an application crash (DoS). Related to CVE-2013-2...

7.5CVSS7.9AI score0.07247EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2020/02/12 1:30 a.m.35 views

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

8AI score0.07247EPSS
SaveExploits0References8
OSV
OSV
added 2019/08/21 7:15 p.m.7 views

CVE-2019-14258

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988...

7.5CVSS7.1AI score0.01729EPSS
SaveExploits1References2
NVD
NVD
added 2019/08/21 7:15 p.m.27 views

CVE-2019-14257

pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765...

7.8CVSS7.8AI score0.00644EPSS
SaveExploits1References2
Rows per page
Query Builder