Lucene search
+L

721 matches found

BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.10 views

The vulnerability of Adobe Connect’s instant messaging program lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

6.1CVSS6.7AI score0.01498EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/11/12 3:15 p.m.7 views

CVE-2020-24443

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS5.7AI score0.01498EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/12 3:15 p.m.25 views

CVE-2020-24443

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS5.8AI score0.01498EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/12 3:15 p.m.10 views

CVE-2020-24442

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS5.7AI score0.01498EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/12 3:15 p.m.26 views

CVE-2020-24442

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS5.8AI score0.01498EPSS
SaveExploits0References1
Prion
Prion
added 2020/11/12 3:15 p.m.30 views

Cross site scripting

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

4.3CVSS5.7AI score0.01498EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/11/12 3:15 p.m.22 views

Cross site scripting

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

4.3CVSS5.7AI score0.01498EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/12 2:29 p.m.37 views

CVE-2020-24443 Reflected Cross-Site Scripting (XSS) in Adobe Connect

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS5.8AI score0.01498EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/11/12 2:19 p.m.37 views

CVE-2020-24442 Reflected Cross-Site Scripting (XSS) in Adobe Connect

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS5.8AI score0.01498EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/11/12 12:00 a.m.44 views

Adobe Connect <= 11.0.0 Multiple Arbitrary Javascript Execution In The Browser Vulnerabilities (APSB20-69)

The version of Adobe Connect installed on the remote host is prior to 11.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-69 advisory. - Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker ...

6.1CVSS6.2AI score0.01498EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/11/11 12:00 a.m.10 views

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2020-63001)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

6.1CVSS6.4AI score0.01498EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/11 12:00 a.m.12 views

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2020-63000)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

6.1CVSS6.4AI score0.01498EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/11/10 11:00 p.m.5 views

CVE-2020-24443

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS6.2AI score0.01498EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/11/10 11:00 p.m.4 views

CVE-2020-24442

Adobe Connect version 11.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS6.2AI score0.01498EPSS
SaveExploits0References2
Qualys Blog
Qualys Blog
added 2020/11/10 8:52 p.m.184 views

November 2020 Patch Tuesday – 112 Vulnerabilities, 17 Critical, Windows Codecs, Network File System, Workstation, Adobe

This month’s Microsoft Patch Tuesday addresses 112 vulnerabilities with 17 of them labeled as Critical. The 17 Critical vulnerabilities cover Windows Codecs, Network File System, Sharepoint, Windows Print Spooler, and several other workstation vulnerabilities. Adobe released patches today for Ado...

10CVSS0.5AI score0.10624EPSS
SaveExploits4
CISA
CISA
added 2020/11/10 12:00 a.m.14 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Adobe...

7.1AI score
SaveExploits0References2
Hacker One
Hacker One
added 2020/10/01 8:51 p.m.15 views

U.S. Dept Of Defense: Insufficient Session Expiration on Adobe Connect | https://█████████

Description: Due to lack of password protection and Insufficient Session Expiration I am able to brute force Adobe Connect meeting rooms. Many of the meeting rooms have chat history and files uploaded. Some of the chat history and files contains personal identifiable information. Walkthrough...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:00 a.m.13 views

The vulnerability of Adobe Connect’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Adobe Connect instant messaging program is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

5.3CVSS5.9AI score0.04433EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2019/01/18 5:29 p.m.26 views

CVE-2018-19718

Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session...

5.3CVSS5.2AI score0.04433EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/18 5:29 p.m.8 views

CVE-2018-19718

Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session...

5.3CVSS5.8AI score0.04433EPSS
SaveExploits0References2
Rows per page
Query Builder