Lucene search
+L

472 matches found

OSV
OSV
•added 2020/11/06 7:15 p.m.•13 views

CVE-2020-3579

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properl...

6.1CVSS6.6AI score0.0084EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/11/05 12:00 a.m.•13 views

Cisco Webex Teams Cross-Site Scripting Vulnerability

Cisco Webex Teams is a comprehensive communications application designed to provide you with all the necessary tools and the right environment to enhance team collaboration. A cross-site scripting vulnerability exists in the web interface of Cisco Webex Teams. The vulnerability stems from imprope...

5.4CVSS6.3AI score0.00816EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/11/04 12:00 a.m.•17 views

PT-2020-4626 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user. The...

6.4CVSS6.1AI score0.00649EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/10/26 12:00 a.m.•10 views

Cisco Firepower Management Center (FMC) Cross-Site Scripting Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A security vulnerability exists in Cisco Firepower Management Center FMC that stems from the web-based management interface failing to adequately validate user-supplied input. An attacker...

6.1CVSS7.3AI score0.00774EPSS
SaveExploits0References1
OSV
OSV
•added 2020/10/08 5:15 a.m.•14 views

CVE-2020-3589

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the...

4.8CVSS6.7AI score0.00617EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2020/10/01 12:00 a.m.•32 views

py-matrix-synapse -- XSS vulnerability

Matrix developers reports: The fallback authentication endpoint served via Synapse were vulnerable to cross-site scripting XSS attacks. The impact depends on the configuration of the domain that Synapse is deployed on, but may allow access to cookies and other browser data, CSRF vulnerabilities,...

6.1CVSS5.1AI score0.01931EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/09/09 2:15 p.m.•6 views

CVE-2020-6324

SAP Netweaver AS ABAPBSP Test Application sbspexttable, version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s brows...

6.1CVSS6.7AI score0.00895EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2020/08/26 5:15 p.m.•10 views

CVE-2020-3523

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface...

5.4CVSS6.3AI score0.00622EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/08/20 12:00 a.m.•20 views

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-48586)

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the Web management interface in Cis...

5.9CVSS6.7AI score0.00622EPSS
SaveExploits0References1
OSV
OSV
•added 2020/08/03 1:15 p.m.•19 views

CVE-2019-4366

IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748...

5.3CVSS5.8AI score0.00721EPSS
SaveExploits0References2
NVD
NVD
•added 2020/08/03 1:15 p.m.•40 views

CVE-2019-4366

IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748...

5.3CVSS4AI score0.00721EPSS
SaveExploits0References2
Prion
Prion
•added 2020/08/03 1:15 p.m.•33 views

Information disclosure

IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748...

5CVSS5AI score0.00721EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/08/03 12:35 p.m.•47 views

CVE-2019-4366

IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748...

2.9CVSS5AI score0.00721EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/03 12:00 a.m.•3 views

CVE-2019-4366: Undefined Security Weakness

IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748...

5.3CVSS7.6AI score0.00721EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/07/01 12:00 a.m.•17 views

PT-2020-3143 · Cisco · Cisco Unified Communications Manager Session Management Edition +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME affected versions not specified Description: The issue is related to insufficient validation of user-supplied...

6.4CVSS6.3AI score0.00416EPSS
SaveExploits0References6
CNVD
CNVD
•added 2020/06/18 12:00 a.m.•17 views

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-34293)

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration, and troubleshooting. A cross-site scripting vulnerability exists in the Web management interface in...

4.8CVSS6.6AI score0.00622EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/05/07 12:00 a.m.•13 views

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2020-27108)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center suffers from a cross-site scripting vulnerability that originates from the user interface not adequately validating user-submitted input. An attacker coul...

6.5CVSS6.5AI score0.00801EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2020/03/11 3:08 p.m.•9 views

Beware of 'Coronavirus Maps' – It's a malware infecting PCs to steal passwords

Cybercriminals will stop at nothing to exploit every chance to prey on internet users. Even the disastrous spread of SARS-COV-II the virus, which causes COVID-19 the disease, is becoming an opportunity for them to likewise spread malware or launch cyber attacks. Reason Labs recently released a...

5.9AI score
SaveExploits0
OSV
OSV
•added 2020/03/04 7:15 p.m.•15 views

CVE-2020-3157

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied...

5.4CVSS6.3AI score0.00633EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2019/12/03 6:16 p.m.•14 views

Avast and AVG Browser Extensions Spying On Chrome and Firefox Users

If your Firefox or Chrome browser has any of the below-listed four extensions offered by Avast and its subsidiary AVG installed, you should disable or remove them as soon as possible. Avast Online Security AVG Online Security Avast SafePrice AVG SafePrice Why? Because these four widely installed...

5.9AI score
SaveExploits0
Rows per page
Query Builder