CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Vulnrichment•added 2024/01/29 4:07 p.m.•18 views

CVE-2024-23827 Nginx-UI arbitrary file write through the Import Certificate feature

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the...

9.8CVSS7.7AI score0.00705EPSS

SaveExploits0References1

OSV•added 2019/08/30 9:15 a.m.•15 views

CVE-2018-15510

Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS5.9AI score0.00631EPSS

SaveExploits0References1

NVD•added 2019/08/30 9:15 a.m.•28 views

CVE-2018-15510

Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.1AI score0.00631EPSS

SaveExploits0References1

Prion•added 2019/08/30 9:15 a.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or HTML...

4.3CVSS6.1AI score0.00631EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by