Lucene search
+L

102 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2005-2465

Malware in sbrugna...

7.5CVSS6.4AI score0.0153EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-21939

Malware in sbrugna...

9.8CVSS9.4AI score0.01992EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-1100

Malware in sbrugna...

5CVSS6.3AI score0.0152EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-5044

Malware in sbrugna...

7.5CVSS6.4AI score0.02582EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2007-1483

Malware in sbrugna...

6.8CVSS6.4AI score0.00671EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2002-0517

Malware in sbrugna...

7.5CVSS6.4AI score0.01648EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2004-0249

Malware in sbrugna...

10CVSS6.4AI score0.04931EPSS
SaveExploits2References7
RedhatCVE
RedhatCVE
added 2025/05/21 11:7 p.m.21 views

CVE-2008-7297

Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS includeSubDomains featur...

5.8CVSS6.8AI score0.01005EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:6 p.m.13 views

CVE-2008-7294

Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...

5.8CVSS6.5AI score0.01012EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/16 11:9 a.m.6 views

CVE-2025-40632 Cross-site scripting (XSS) vulnerability in IceWarp Mail Server

Cross-site scripting XSS in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to modify the “lastLogin” cookie with malicious JavaScript code that will be executed when the page is rendered...

2CVSS5.8AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/16 11:9 a.m.26 views

CVE-2025-40632 Cross-site scripting (XSS) vulnerability in IceWarp Mail Server

Cross-site scripting XSS in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to modify the “lastLogin” cookie with malicious JavaScript code that will be executed when the page is rendered...

2CVSS0.002EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/16 11:9 a.m.27 views

CVE-2025-40632

IceWarp Mail Server (v11.4.0) contains a Cross-Site Scripting (XSS) vulnerability where an attacker can modify the lastLogin cookie to inject JavaScript that executes when the page renders. Affected component is the web-facing handling of user data; the root cause is lack of proper filtering/esca...

6.1CVSS5.9AI score0.002EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/16 12:0 a.m.11 views

PT-2025-21635 · Icewarp · Icewarp Mail Server

Name of the Vulnerable Software and Affected Versions: Icewarp Mail Server version 11.4.0 Description: The issue is related to cross-site scripting XSS that allows an attacker to modify the lastLogin cookie with malicious JavaScript code. This code will be executed when the page is rendered...

2CVSS5.3AI score0.002EPSS
SaveExploits0References4
Veracode
Veracode
added 2025/02/26 8:54 a.m.5 views

Bit Flipping Attack

cookie-encrypter is vulnerable to Bit flipping Attack. The vulnerability is due to the lack of integrity verification, allowing attackers to modify encrypted cookies without detection...

9.1CVSS6.7AI score0.00279EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 2:45 p.m.15 views

CVE-2020-6364

SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...

10CVSS7.1AI score0.06408EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/18 11:15 p.m.41 views

CVE-2024-21872

The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter...

8.7CVSS8AI score0.00551EPSS
SaveExploits1References1
CVE
CVE
added 2024/04/18 10:10 p.m.71 views

CVE-2024-21872

The CVE-2024-21872 vulnerability affects Electrolink FM/DAB/TV Transmitter devices, arising from Reliance on Cookies without Validation and Integrity Checking. An unauthenticated attacker can bypass login and modify the cookie to access hidden pages and perform more critical transmitter operation...

8.7CVSS7.1AI score0.00551EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/18 12:0 a.m.7 views

Electrolink FM/DAB/TV Transmitter 安全漏洞

The Electrolink FM/DAB/TV Transmitter is a series of transmitters from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter that originates from an attacker being able to bypass authentication and modify cookies to access hidden pages...

8.7CVSS6.7AI score0.00551EPSS
SaveExploits1References2
zdt
zdt
added 2023/10/02 12:0 a.m.297 views

Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality Vulnerability

Electrolink FM/DAB/TV Transmitter allows an unauthenticated attacker to bypass authentication and modify the Cookie to reveal hidden pages that allows more critical operations to the transmitter. Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality Vendor: Electrolink s.r.l. Product...

7.7AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/10/02 12:0 a.m.259 views

Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality

Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality Vendor: Electrolink s.r.l. Product web page: https://www.electrolink.com Affected version: 10W, 100W, 250W, Compact DAB Transmitter 500W, 1kW, 2kW Medium DAB Transmitter 2.5kW, 3kW, 4kW, 5kW High Power DAB Transmitter 100W, 500W,...

7.1AI score
SaveExploits0
Rows per page
Query Builder