Lucene search
+L

9990 matches found

NVD
NVD
added 2025/11/14 6:15 p.m.11 views

CVE-2025-54348

A Stored Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...

6.5CVSS0.00165EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/14 6:15 p.m.11 views

CVE-2025-54343

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges...

9.6CVSS0.00256EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/14 6:15 p.m.9 views

CVE-2025-54346

A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...

7.6CVSS5.8AI score0.00248EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/14 6:15 p.m.9 views

CVE-2025-54345

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor...

7.5CVSS0.00296EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/14 6:15 p.m.10 views

CVE-2025-54345

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor...

7.5CVSS5.7AI score0.00296EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/14 6:15 p.m.9 views

CVE-2025-54342

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies...

3.3CVSS0.00085EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/14 6:20 a.m.8 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server and Websphere Application Server Liberty shipped with IBM Guardium Key Lifecycle Manager (GKLM)

Summary WebSphere Application Server and Websphere Application Server Liberty is shipped as a component of IBM Guardium Key Lifecycle Manager GKLM. Information about a security vulnerability affecting WebSphere Application Server and Websphere Application Server Liberty has been published in a...

7.5CVSS6.8AI score0.00756EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/14 12:0 a.m.4 views

CVE-2025-54560

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure...

6.5AI score0.00184EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.15 views

PT-2025-46983

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A Reflected Cross Site Scripting XSS issue exists in the Application Server of the software. This allows an attacker to potentially hijack a user’s browser and capture...

7.6CVSS5.8AI score0.00248EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/11/14 12:0 a.m.4 views

CVE-2025-54342

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies...

6.4AI score0.00085EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/14 12:0 a.m.22 views

CVE-2025-54562

CVE-2025-54562 affects Desktop Alert PingAlert, specifically the Application Server in versions 6.1.0.11–6.1.1.2, where a stack trace can disclose technical information, impacting confidentiality. Multiple connected sources corroborate this, including Red Hat and PT-Research entries that specify ...

4.3CVSS6.3AI score0.00217EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.19 views

PT-2025-46994

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A Server-side Request Forgery issue exists in the Application Server component. This allows for probing of internal infrastructure. Recommendations Update to a newer version...

3.8CVSS6.7AI score0.00184EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/11/14 12:0 a.m.17 views

CVE-2025-54346

A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...

0.00248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.10 views

PT-2025-46981

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A flaw exists in the Application Server of Desktop Alert PingAlert that leads to the exposure of sensitive information due to incompatible policies. Recommendations Update t...

3.3CVSS6.2AI score0.00085EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/11/14 12:0 a.m.6 views

CVE-2025-54340

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky Cryptographic Algorithm...

6.4AI score0.00085EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/14 12:0 a.m.21 views

CVE-2025-54560

Desktop Alert PingAlert has a Server-Side Request Forgery in its Application Server, affecting versions 6.1.0.11 through 6.1.1.2. The issue stems from insufficient authentication to verify request origin and can be used to probe internal infrastructure. Impact details from CVE notes indicate limi...

3.8CVSS6.5AI score0.00184EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/11/14 12:0 a.m.10 views

CVE-2025-54560

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure...

0.00184EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/14 12:0 a.m.12 views

EUVD-2025-197627

A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...

7.6CVSS5.4AI score0.00248EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/11/14 12:0 a.m.13 views

CVE-2025-54348

A Stored Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...

0.00165EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/14 12:0 a.m.20 views

CVE-2025-54343

CVE-2025-54343 affects Desktop Alert PingAlert (Application Server) versions 6.1.0.11–6.1.1.2. The vulnerability is described as an Incorrect/ improper Access Control that enables remote Escalation of Privileges. Exploitation details are not consistently provided across sources, but multiple feed...

9.6CVSS6.5AI score0.00256EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder