Lucene search
K

6 matches found

CNVD
CNVD
added 2024/04/22 12:0 a.m.5 views

Apache Airflow Information Disclosure Vulnerability (CNVD-2024-20804)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow versions 2.7.0...

5.3CVSS5.9AI score0.00048EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.1 views

Apache NiFi 跨站脚本漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. Apache NiFi suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and...

7.9CVSS6AI score0.00293EPSS
Exploits0References1
OSV
OSV
added 2021/04/26 5:15 p.m.1 views

UBUNTU-CVE-2021-21212

Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP...

6.5CVSS6.8AI score0.00996EPSS
Exploits0References2
OSV
OSV
added 2021/03/23 5:15 p.m.2 views

CVE-2021-23274

The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected syste...

9.8CVSS7.4AI score0.00241EPSS
Exploits0References2
NVD
NVD
added 2014/10/06 2:55 p.m.13 views

CVE-2014-7869

Cross-site scripting XSS vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer contexts" permission to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.3AI score0.00201EPSS
Exploits0References4
Cvelist
Cvelist
added 2014/10/06 2:0 p.m.17 views

CVE-2014-7869

Cross-site scripting XSS vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer contexts" permission to inject arbitrary web script or HTML via unspecified vectors...

5.3AI score0.00201EPSS
Exploits0References4
Rows per page
Query Builder