Lucene search
+L

65 matches found

CNNVD
CNNVD
•added 2024/09/26 12:00 a.m.•16 views

National Keep CyberMath 安全漏洞

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A security vulnerability exists in versions prior to National Keep CyberMath CYBM.240816253 that stems from the presence of an authorization error vulnerability that allows access to functionality...

9.8CVSS6.6AI score0.00279EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/26 12:00 a.m.•13 views

National Keep CyberMath 安全漏洞

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A security vulnerability exists in versions prior to National Keep CyberMath CYBM.240816253, which stems from the presence of an external-party-accessible file or directory vulnerability that could...

7.5CVSS6.6AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/26 12:00 a.m.•4 views

CVE-2024-7107: Files or Directories Accessible to External Parties

Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations. This issue affects CyberMath: before CYBM.240816253...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/09/26 12:00 a.m.•19 views

PT-2024-38080 · National Keep Cyber Security Services · Cybermath

Name of the Vulnerable Software and Affected Versions: CyberMath versions before CYBM.240816253 Description: The issue affects National Keep Cyber Security Services' CyberMath, allowing external parties to access files or directories and collect data from common resource locations. Recommendation...

7.5CVSS7.2AI score0.00287EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/26 12:00 a.m.•5 views

CVE-2024-7108: Incorrect Authorization

Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CyberMath: before CYBM.240816253...

9.8CVSS5.8AI score0.00279EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/02/02 1:15 p.m.•10 views

CVE-2023-6676

Cross-Site Request Forgery CSRF vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery. This issue affects CyberMath: from v1.4 before v1.5...

8.8CVSS7.3AI score0.00292EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2024/02/02 1:15 p.m.•18 views

CVE-2023-6673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS. This issue affects CyberMath: from v.1.4 before v.1.5...

6.1CVSS6.4AI score0.00333EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/02/02 1:15 p.m.•15 views

CVE-2023-6675

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server.This issue affects CyberMath: from v.1.4 before v.1.5...

9.8CVSS5.8AI score0.00579EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/02 1:15 p.m.•35 views

CVE-2023-6676

Cross-Site Request Forgery CSRF vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery. This issue affects CyberMath: from v1.4 before v1.5...

8.8CVSS8.8AI score0.00292EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/02 1:15 p.m.•35 views

CVE-2023-6673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS. This issue affects CyberMath: from v.1.4 before v.1.5...

6.1CVSS6.3AI score0.00333EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/02 1:15 p.m.•40 views

CVE-2023-6675

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5...

9.8CVSS9.4AI score0.00579EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/02 1:15 p.m.•15 views

CVE-2023-6673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS.This issue affects CyberMath: from v.1.4 before v.1.5...

6.1CVSS5.8AI score0.00333EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/02/02 1:15 p.m.•10 views

CVE-2023-6675

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5...

9.8CVSS7.3AI score0.00579EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/02/02 1:15 p.m.•16 views

CVE-2023-6676

Cross-Site Request Forgery CSRF vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery.This issue affects CyberMath: from v1.4 before v1.5...

8.8CVSS5.8AI score0.00292EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/02 1:15 p.m.•32 views

CVE-2023-6672

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS. This issue affects CyberMath: from v1.4 before v1.5...

5.4CVSS5.5AI score0.00294EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/02/02 1:15 p.m.•9 views

CVE-2023-6672

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS. This issue affects CyberMath: from v1.4 before v1.5...

5.4CVSS6AI score0.00294EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/02/02 1:15 p.m.•20 views

CVE-2023-6672

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS.This issue affects CyberMath: from v1.4 before v1.5...

5.4CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/02 1:15 p.m.•30 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS.This issue affects CyberMath: from v.1.4 before v.1.5...

5.8CVSS7.2AI score0.00333EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2024/02/02 1:15 p.m.•23 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS.This issue affects CyberMath: from v1.4 before v1.5...

4.9CVSS7AI score0.00294EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2024/02/02 1:15 p.m.•28 views

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server.This issue affects CyberMath: from v.1.4 before v.1.5...

7.5CVSS7.1AI score0.00579EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder