Lucene search
+L

4349 matches found

OSV
OSV
•added 2016/03/19 3:59 p.m.•15 views

CVE-2016-2245

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

9.8CVSS5.8AI score0.05937EPSS
SaveExploits0References1
NVD
NVD
•added 2016/03/19 3:59 p.m.•26 views

CVE-2016-2245

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

10CVSS9.7AI score0.05937EPSS
SaveExploits0References1
Prion
Prion
•added 2016/03/19 3:59 p.m.•21 views

Authentication flaw

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

10CVSS7.4AI score0.05937EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2016/03/19 3:00 p.m.•40 views

CVE-2016-2245

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

9.7AI score0.05937EPSS
SaveExploits0References1
CVE
CVE
•added 2016/03/19 3:00 p.m.•79 views

CVE-2016-2245

HP Support Assistant prior to 8.1.52.1 contains an authentication bypass vulnerability (CVE-2016-2245). Remote attackers could bypass authentication via unspecified vectors. Impact per sources indicates high confidentiality/integrity/availability concerns (CVSS v3 base score 9.8, critical). HP ha...

10CVSS9.5AI score0.05937EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/03/19 12:00 a.m.•7 views

CVE-2016-2245: Improper Authentication

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

10CVSS8.3AI score0.05937EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/03/19 12:00 a.m.•4 views

PT-2016-5078

Name of the Vulnerable Software and Affected Versions HP Support Assistant versions prior to 8.1.52.1 Description The issue allows remote attackers to bypass authentication. Recommendations For versions prior to 8.1.52.1, update to version 8.1.52.1 or later to resolve the issue...

10CVSS0.05937EPSS
SaveExploits0References3
Hewlett-Packard
Hewlett-Packard
•added 2016/03/04 12:00 a.m.•34 views

HPSBGN03438 rev.2 - HP Support Assistant, Local Authentication Bypass

Potential Security Impact Authentication Bypass Source: Hewlett­Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY A potential security vulnerability has been identified in HP Support Assistant. This vulnerability could be exploited locally to allow authentication bypass...

10CVSS9.1AI score0.05937EPSS
SaveExploits0
CNVD
CNVD
•added 2016/01/28 12:00 a.m.•15 views

Greenbone Networks Greenbone Security Assistant charts module cross-site scripting vulnerability

Greenbone Networks Greenbone Security Assistant GSA is a web interface that provides access to the OpenVAS service layer. charts is one of the charting modules. The charts module/opm URI in the Greenbone Networks GSA fails to adequately filter the 'aggregatetype' parameter in the getaggregat...

6.1CVSS6.5AI score0.01619EPSS
SaveExploits1References1
OSV
OSV
•added 2016/01/26 7:59 p.m.•8 views

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

6.1CVSS5.8AI score
SaveExploits0References7
NVD
NVD
•added 2016/01/26 7:59 p.m.•20 views

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

6.1CVSS6.2AI score0.01619EPSS
SaveExploits1References7
Prion
Prion
•added 2016/01/26 7:59 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

4.3CVSS6.2AI score0.01619EPSS
SaveExploits1References7Affected Software3
CVE
CVE
•added 2016/01/26 7:00 p.m.•80 views

CVE-2016-1926

The CVE-2016-1926 entry concerns Greenbone Security Assistant (GSA) 6.x up to 6.0.8, where the charts module is vulnerable to cross-site scripting (XSS). The flaw is caused by insufficient input sanitization on the aggregate_type parameter used by the get_aggregate command to omp, enabling a remo...

6.1CVSS6AI score0.01619EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2016/01/26 7:00 p.m.•42 views

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

6.1AI score0.01619EPSS
SaveExploits1References7
Mend
Mend
•added 2016/01/26 7:00 p.m.•3 views

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

6.1CVSS0.01619EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2016/01/26 12:00 a.m.•4 views

PT-2016-4926

Name of the Vulnerable Software and Affected Versions Greenbone Security Assistant versions 6.0.0 through 6.0.7 Description A cross-site scripting issue exists due to insufficient input validation in the charts module. This allows remote attackers to inject arbitrary web script or HTML via the...

6.1CVSS0.01619EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/26 12:00 a.m.•5 views

CVE-2016-1926: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

6.1CVSS6.5AI score0.01619EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2016/01/10 2:11 p.m.•15 views

link-assistant.com XSS vulnerability

Open Bug Bounty ID: OBB-123062 Description| Value ---|--- Affected Website:| link-assistant.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
SaveExploits0
seebug.org
seebug.org
•added 2015/12/03 12:00 a.m.•24 views

金山手机助手服务权限提升漏洞

No description provided by source...

7.1AI score
SaveExploits0
myhack58
myhack58
•added 2015/11/22 12:00 a.m.•20 views

3 6 0 Cheap Shot: a wormhole vulnerability“DimensionDoor”exposure-vulnerability warning-the black bar safety net

3 6 0 mobile assistant security team about this response: 1, The paper analysis the 3. 1. 5 5 3 6 0 mobile assistant 2 0 1 4 year-old version, the current official version and the beta version are not present the remote port is a security risk. 2, the 3 6 0 mobile assistant APK download will pop-...

SaveExploits0
Rows per page
Query Builder