Lucene search
+L

933 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.6 views

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process of software products allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker, operating remotely, t...

7.8CVSS7.3AI score0.08235EPSS
SaveExploits0References13Affected Software20
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.10 views

The vulnerability of Java-Framework templates in the Apache Camel framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Java-Framework templates in the Apache Camel framework lies in insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

7.8CVSS7.4AI score0.04491EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.6 views

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Data Center Network Manager DCNM management interface relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

6.5CVSS5.9AI score0.00614EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.11 views

The vulnerability in the web interface for managing microprogrammed software in Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W routers allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute...

9CVSS7.5AI score0.02371EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.10 views

The vulnerability of the Drupal CMS system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the Drupal CMS system’s kernel is related to insufficient cleaning of special elements in the output data used by the incoming components. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.9CVSS8AI score0.04304EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.6 views

The vulnerability of the jQuery library arises from insufficient cleaning of data provided by users when elements of the <option> type are passed. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the jQuery library exists due to insufficient cleaning of the data provided by the user when elements with the tag are passed to jQuery’s DOM methods. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.1CVSS6.5AI score0.8383EPSS
SaveExploits6References31Affected Software43
Openbugbounty
Openbugbounty
added 2020/10/25 1:18 p.m.10 views

platinumcleaning.com Cross Site Scripting vulnerability OBB-1445433

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/16 5:20 a.m.8 views

longbeachdraincleaning.net Cross Site Scripting vulnerability OBB-1412424

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/06 4:22 p.m.7 views

longbeachdraincleaning.net Cross Site Scripting vulnerability OBB-1385938

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2020/09/29 12:0 a.m.2 views

Binary vulnerability in mkclean (CNVD-2020-58376)

mkclean is a command line tool for cleaning and optimizing Matroska files that have been mixed. A binary vulnerability exists in mkclean that can be exploited by an attacker to cause a denial of service...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/28 5:31 a.m.6 views

longbeachdraincleaning.net Cross Site Scripting vulnerability OBB-1369791

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:0 a.m.9 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers...

5.4CVSS6AI score0.02229EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/07/21 12:0 a.m.6 views

The vulnerability of the web interface of the Cisco Data Center Network Manager system allows a perpetrator to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or gain unauthorized access to protected information...

5.5CVSS6AI score0.00622EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/07/15 12:0 a.m.9 views

The vulnerability of the SAP Hybris Commerce e-commerce platform, related to the lack of measures for cleaning incoming data, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the SAP Hybris Commerce e-commerce platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6AI score0.01331EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2020/07/01 12:0 a.m.4 views

Windows cleaning assistant input validation error vulnerability

Windows cleaning assistant is a Trojan and malware cleaning application for Windows systems from the Windows cleaning assistant team. The program supports Microsoft Backup Tool, File Extraction, File Shredding, Internet Explorer Cleaning and Disk Cleanup. An input validation error vulnerability...

7.8CVSS6.4AI score0.0035EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/01 12:0 a.m.3 views

Windows cleaning assistant input validation error vulnerability (CNVD-2020-51417)

Windows cleaning assistant is a Trojan and malware cleaning application for Windows systems from the Windows cleaning assistant team. The program supports Microsoft Backup Tool, File Extraction, File Shredding, Internet Explorer Cleaner and Disk Cleaner. An input validation error vulnerability...

7.8CVSS6.4AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/30 3:15 p.m.14 views

CVE-2020-14957

In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD...

7.8CVSS0.0035EPSS
SaveExploits0References2
OSV
OSV
added 2020/06/30 3:15 p.m.6 views

CVE-2020-14956

In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA...

7.8CVSS7.2AI score0.0035EPSS
SaveExploits0References2
OSV
OSV
added 2020/06/30 3:15 p.m.7 views

CVE-2020-14957

In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD...

7.8CVSS7.2AI score0.0035EPSS
SaveExploits0References2
Prion
Prion
added 2020/06/30 3:15 p.m.13 views

Input validation

In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA...

6.1CVSS7.9AI score0.0035EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder