Lucene search
+L

152 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.12 views

The vulnerability of the Singularity container platform, related to the failure to cleanse input data, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Singularity container platform relates to the failure to cleanse input data. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.9AI score0.01415EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.13 views

The vulnerability of the highly efficient pglogical logical replication system, related to the failure to cleanse input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the highly efficient pglogical logical replication system is related to the failure to perform data cleansing on input data. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

7.2CVSS6.6AI score0.0046EPSS
SaveExploits0References4Affected Software2
Redos
Redos
added 2021/09/08 12:00 a.m.24 views

ROS-2-498

2.498 Multiple Vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.8CVSS8.2AI score0.01251EPSS
SaveExploits1
Redos
Redos
added 2021/09/08 12:00 a.m.30 views

ROS-2-581

2.581 Multiple Vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

6.9AI score0.01128EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:00 a.m.13 views

ROS-2-1692

2.1692 Multiple vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.5CVSS8.7AI score0.01128EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:00 a.m.15 views

ROS-2-828

2.828 Multiple Vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.8CVSS8.3AI score0.01251EPSS
SaveExploits1
Redos
Redos
added 2021/09/08 12:00 a.m.18 views

ROS-2-545

2.545 Multiple vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.5CVSS8.3AI score0.01905EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:00 a.m.22 views

ROS-2-664

2.664 Multiple vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.5CVSS8.3AI score0.01128EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:00 a.m.18 views

ROS-2-1875

2.1875 Multiple vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.5CVSS8.5AI score0.01905EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:00 a.m.17 views

ROS-2-982

2.982 Multiple vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

9.8CVSS8.4AI score0.23293EPSS
SaveExploits1
Redos
Redos
added 2021/09/08 12:00 a.m.12 views

ROS-2-1948

2.1948 Multiple Vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.5CVSS7.6AI score0.01128EPSS
SaveExploits0
Redos
Redos
added 2021/09/08 12:00 a.m.13 views

ROS-2-2197

2.2197 Multiple vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...

7.8CVSS8.3AI score0.99969EPSS
SaveExploits83
CNNVD
CNNVD
added 2021/08/25 12:00 a.m.12 views

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type MT is a blogging system from Six Apart USA. The system includes features such as multiple users, comments, quotes, and topics. Six Apart Movable Type suffers from a cross-site scripting vulnerability that stems from the application's insufficient cleansing of user-supplied...

6.1CVSS6.4AI score0.009EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/08/25 12:00 a.m.10 views

Six Apart Movable Type 跨站脚本漏洞

Six Apart Movable Type MT is a blogging system from Six Apart USA. The system includes features such as multiple users, comments, quotes, and topics. Six Apart Movable Type suffers from a cross-site scripting vulnerability that stems from the application's insufficient cleansing of user-supplied...

6.1CVSS6.4AI score0.00904EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/08/13 12:00 a.m.13 views

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in the lack of data cleansing measures at the management level. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2019, and Adobe Acrobat Reader 2019 are related to the lack of data cleansing measures at the management level. Exploiting these vulnerabilities can all...

10CVSS8.2AI score0.06045EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/13 12:00 a.m.15 views

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to clean data at the management level, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.5AI score0.44098EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.11 views

SAP NetWeaver 跨站脚本漏洞

SAP NetWeaver Development Infrastructure is a SAP company that provides a consistent development environment, development teams, and support for software development throughout the product lifecycle. A cross-site scripting vulnerability exists in SAP NetWeaver Development Infrastructure, which...

6.9CVSS6.7AI score0.00638EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/07/28 12:00 a.m.11 views

curly-bracket-parser 跨站脚本漏洞

curly-bracket-parser is an application. A bracket parser. curly-bracket-parser suffers from a cross-site scripting vulnerability that stems from a failure to properly clean up user input when used as a template library, which can be exploited by attackers to conduct cross-site scripting attacks...

6.1CVSS5.2AI score0.00793EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/05/13 12:00 a.m.14 views

KonaWiki SQL注入漏洞

KonaWiki is a lightweight Wiki system. The system is primarily used for writing manuscripts, keeping minutes and memos, etc. A SQL injection vulnerability exists in KonaWiki2 prior to version 2.2.4. The vulnerability stems from the program not performing sufficient cleansing of user-supplied data...

9.8CVSS6.3AI score0.01317EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/03/26 12:00 a.m.11 views

Data Edge CA eHealth Performance Manager 跨站脚本漏洞

Data Edge CA eHealth Performance Manager is an application from Data Edge Ireland. It provides real-time and predictive performance analytics to take corrective action before business processes are negatively impacted. A cross-site scripting vulnerability exists in Data Edge CA eHealth Performanc...

5.4CVSS5.1AI score0.0074EPSS
SaveExploits1References2
Rows per page
Query Builder