Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-25025

Malware in sbrugna...

6.1CVSS6.3AI score0.01089EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/09/09 3:54 p.m.12 views

CVE-2022-28742

aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application does not validate user session when accessing many application pages. This can allow an attacker to gain unauthenticated access to sensitive functionalities in the application...

7.9AI score0.0037EPSS
Exploits0References2
Prion
Prion
added 2018/06/06 8:29 p.m.15 views

Authentication flaw

In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator URL on the web server, a malicious user is able to access the configuration files and application pages without authentication...

7.5CVSS9.3AI score0.01186EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2018/06/06 12:0 a.m.1 views

ABB IP Gateway Unauthorized Access Vulnerability

ABB IP GATEWAY is a building management system from ABB Switzerland. A security vulnerability exists in ABB IP GATEWAY version 3.39 and earlier. The vulnerability can be exploited by an attacker to gain unauthenticated access to configuration files or application pages via a specially crafted URL...

9.8CVSS9.6AI score0.01186EPSS
Exploits0References1
Prion
Prion
added 2018/04/04 1:29 p.m.19 views

Hardcoded credentials

Target influence via framing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames...

4.3CVSS6.3AI score0.00196EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/04/04 1:0 p.m.15 views

CVE-2017-3967 SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability

Target influence via framing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames...

6.1CVSS6.3AI score0.00196EPSS
Exploits0References1
CVE
CVE
added 2006/04/01 2:0 a.m.39 views

CVE-2005-4759

CVE-2005-4759 affects BEA WebLogic Server and WebLogic Express 8.1 and 7.0. During OS platform migrations, it does not warn the admin about URLResource case-sensitivity differences, which may cause local users to inadvertently lose protection of Web Application pages. The NVD metrics show a base ...

5CVSS6.7AI score0.00518EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2005/12/31 5:0 a.m.10 views

CVE-2005-4759

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages...

5CVSS6.3AI score0.00518EPSS
Exploits0References3
Rows per page
Query Builder