Lucene search
+L

2997 matches found

CVE
CVE
added 2021/07/28 11:38 a.m.78 views

CVE-2020-10590

CVE-2020-10590 affects Replicated Classic 2.x. The issue is an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on a Replicated Classic server could retrieve the TLS keypair (certif...

7.5CVSS7.4AI score0.01312EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/07/28 11:38 a.m.47 views

CVE-2020-10590

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port 8800 on the Replicated Classic server could retrieve the TLS Keypair Cert and Key used to configure...

7.5AI score0.01312EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:00 a.m.10 views

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic arises from insufficient validation of input data. This allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

7.5CVSS7.5AI score0.03207EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/07/23 11:15 a.m.18 views

CVE-2021-26799

Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS5.9AI score
SaveExploits0References2
NVD
NVD
added 2021/07/23 11:15 a.m.28 views

CVE-2021-26799

Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS0.01042EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/07/23 11:15 a.m.4 views

CVE-2021-26799

Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.3AI score0.01042EPSS
SaveExploits1References3
Prion
Prion
added 2021/07/23 11:15 a.m.18 views

Cross site scripting

Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...

4.3CVSS6.1AI score0.01042EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/07/23 10:39 a.m.28 views

CVE-2021-26799

Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...

6.1AI score0.01042EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/23 10:39 a.m.55 views

CVE-2021-26799

CVE-2021-26799 affects Omeka Classic up to version 2.7, with a Cross Site Scripting (XSS) vulnerability in the admin/files/edit path that lets remote attackers inject arbitrary web script or HTML. The connected documents confirm the affected product and vulnerable component, but do not provide ex...

6.1CVSS5.9AI score0.01042EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/07/23 12:00 a.m.11 views

Omeka Classic 跨站脚本漏洞

Omeka Classic is a web publishing platform for sharing digital collections and creating media-rich online exhibitions. A cross-site scripting vulnerability exists in Omeka Classic = 2.7, which allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.1AI score0.01042EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2021/07/16 7:02 a.m.65 views

Exploit for Classic Buffer Overflow in Microsoft

CVE-2017-7269 iis6 exploit 2017 !imagehttps:/...

10CVSS7.3AI score0.99823EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2021/07/16 7:02 a.m.62 views

Exploit for Classic Buffer Overflow in Microsoft

CVE-2017-7269 iis6 exploit 2017 !imagehttps:/...

10CVSS7.3AI score0.99823EPSS
SaveExploits41
Prion
Prion
added 2021/06/25 7:15 p.m.21 views

Authentication flaw

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

7.8CVSS7.5AI score0.01493EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/25 7:15 p.m.25 views

Remote code execution

Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The...

5.1CVSS7.2AI score0.01756EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2021/06/25 6:26 p.m.95 views

CVE-2021-33542

CVE-2021-33542 affects Phoenix Contact Classic Automation Worx Software Suite

7.8CVSS7.4AI score0.01756EPSS
SaveExploits0References2Affected Software3
CNNVD
CNNVD
added 2021/06/25 12:00 a.m.10 views

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 安全漏洞

The Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 are industrial control devices from Phoenix Contact, Germany. The protocol configuration for device management and communication does not include authentication measures. Phoenix Contact Classic Line Controllers versions ILC1x0 and...

7.8CVSS7.5AI score0.01493EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/18 9:15 p.m.9 views

CVE-2021-21257

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...

7.5CVSS5.6AI score0.01088EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/18 9:15 p.m.29 views

Out-of-bounds

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...

5CVSS7.5AI score0.01088EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/06/18 8:55 p.m.95 views

CVE-2021-21257

Contiki-NG prior to version 4.6 is affected by CVE-2021-21257 due to an out-of-bounds write in the RPL-Classic and RPL-Lite implementations. The bug occurs in rpl_ext_header_srh_update where addr_ptr is derived from an unvalidated CMPR field in the RPL source routing header, enabling out-of-bound...

8.2CVSS7.7AI score0.01088EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/06/18 8:55 p.m.49 views

CVE-2021-21257 Out-of-bounds write in RPL-Classic and RPL-Lite

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...

8.2CVSS8.3AI score0.01088EPSS
SaveExploits0References2
Rows per page
Query Builder