Lucene search
+L

708 matches found

OSV
OSV
added 2019/03/06 7:29 p.m.20 views

CVE-2019-9603

MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891...

6.5CVSS6.8AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2019/02/25 12:0 a.m.79 views

Joomla Responsive Grid For Articles Grid 3.4.5 SQL Injection

Exploit Title : Joomla Responsive Grid for Articles ComGrid Components 3.4.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : toolsjx.web-help.me minitek.gr Software Information Link :...

0.4AI score
SaveExploits0
Prion
Prion
added 2019/02/23 7:29 p.m.14 views

Cross site request forgery (csrf)

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI...

5.8CVSS6.5AI score0.00556EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2019/02/23 7:29 p.m.10 views

CVE-2019-9051

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI...

6.5CVSS6.8AI score
SaveExploits0References1
NVD
NVD
added 2019/02/23 7:29 p.m.18 views

CVE-2019-9051

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI...

6.5CVSS6.5AI score0.00556EPSS
SaveExploits1References1
OSV
OSV
added 2019/02/18 2:29 p.m.5 views

CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

5.7CVSS5.8AI score0.00381EPSS
SaveExploits1References1
Prion
Prion
added 2019/02/18 2:29 p.m.13 views

Cross site request forgery (csrf)

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

4.9CVSS5.7AI score0.00381EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2019/02/18 2:29 p.m.19 views

CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

5.7CVSS5.6AI score0.00381EPSS
SaveExploits1References1
Microsoft KB
Microsoft KB
added 2019/02/12 8:0 a.m.61 views

Cumulative Update 1 for Exchange Server 2019

None None...

9.3CVSS7AI score0.23799EPSS
SaveExploits2
Microsoft KB
Microsoft KB
added 2019/02/12 8:0 a.m.298 views

Cumulative Update 22 for Exchange Server 2013

Cumulative Update 22 for Exchange Server 2013 Cumulative Update 22 for Microsoft Exchange Server 2013 was released on February 12, 2019. This cumulative update is a security update. This cumulative update includes fixes for nonsecurity issues and all previously released fixes for security and...

9.3CVSS7.1AI score0.23799EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
added 2018/12/08 12:5 p.m.14 views

Quarterly SPM Support Bulletin 2015 Q4

Question Quarterly SPM Support Bulletin 2015 Q4 Answer SPM Support Bulletin ICM 9.0.2 Released ICM 9.0.2 has been released. You can find the release documentation here. Highlights include; setting scheduler properties per process allowing more flexible on error handling, new charts in Presenter...

7.4AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/11/16 2:23 a.m.256 views

Microsoft Forefront Threat Management Gateway 2010 Service Pack 2

Describes the issues that are resolved by Microsoft Forefront Threat Management Gateway 2010 Service Pack 2.SummaryThis article lists the problems that are fixed in Microsoft Forefront Threat Management Gateway 2010 Service Pack 2 SP2. Service packs are cumulative. This means that the problems th...

6.7AI score
SaveExploits0
Veeam
Veeam
added 2018/10/17 10:22 a.m.19 views

Consistent backup failures after installing vSphere 6.7 U1

Challenge After updating vCenter to 6.7U1, processing of all VMs fails with "Object reference not set to an instance of an object." Cause The issue is triggered by an update to the vSphere API version in vCenter 6.7 U1. Solution The issue affects only Veeam Backup & Replication 9.5 Update 3a...

6.9AI score
SaveExploits0
OSV
OSV
added 2018/09/21 5:29 p.m.9 views

CVE-2018-16833

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI...

6.1CVSS5.8AI score0.65406EPSS
SaveExploits6References1
Cvelist
Cvelist
added 2018/09/21 5:0 p.m.27 views

CVE-2018-16833

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI...

6AI score0.65406EPSS
SaveExploits6References1
OSV
OSV
added 2018/09/10 11:29 p.m.4 views

CVE-2018-16805

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator...

4.8CVSS5.7AI score0.0076EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/09/06 12:0 a.m.6 views

baigo CMS Cross-Site Request Forgery Vulnerability

baigo CMS is an open source PHP-based content management system CMS. A cross-site request forgery vulnerability exists in the index.php?m=article&c=request page in baigo CMS version 2.1.1, which can be exploited by remote attackers to publish arbitrary articles...

6.5CVSS6.7AI score0.00422EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2018/08/30 10:0 a.m.16 views

intoceansys.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-671134 Description| Value ---|--- Affected Website:| intoceansys.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
OSV
OSV
added 2018/07/18 4:29 p.m.5 views

CVE-2018-12429

JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie...

5.4CVSS5.8AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
added 2018/07/18 4:29 p.m.25 views

CVE-2018-12429

JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie...

5.4CVSS5.1AI score0.00531EPSS
SaveExploits1References1
Rows per page
Query Builder