Lucene search
+L

67 matches found

NVD
NVD
•added 2014/01/16 7:55 p.m.•46 views

CVE-2013-6786

Cross-site scripting XSS vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitra...

4.3CVSS5.6AI score0.02172EPSS
SaveExploits1References3
CVE
CVE
•added 2014/01/16 7:00 p.m.•226 views

CVE-2013-6786

CVE-2013-6786 is an XSS vulnerability in Allegro RomPager prior to 4.51 used on ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D‑Link DSL-2640R/2641R. The flaw arises when the forbidden author header protection is bypassed, allowing remote attackers to inject arbitrary web sc...

4.3CVSS7.6AI score0.02172EPSS
SaveExploits1References3Affected Software7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/16 12:00 a.m.•7 views

CVE-2013-6786: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitra...

4.3CVSS6AI score0.02172EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2013/12/13 12:00 a.m.•8 views

PT-2013-1057

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.0 through 1.0.0l OpenSSL versions 1.0.1 through 1.0.1f Description The DTLS retransmission implementation in OpenSSL does not properly maintain data structures for digest and encryption contexts. This might allow...

7.5CVSS0.15345EPSS
SaveExploits1References187
Cvelist
Cvelist
•added 2009/02/26 4:00 p.m.•39 views

CVE-2008-6297

Cross-site scripting XSS vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the 1 domain and 2 d1 parameters...

5.7AI score0.01458EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/26 12:00 a.m.•7 views

CVE-2008-6297: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the 1 domain and 2 d1 parameters...

4.3CVSS5.9AI score0.01458EPSS
SaveExploits2References2
CVE
CVE
•added 2006/10/18 1:00 a.m.•63 views

CVE-2006-5378

Technical details about CVE-2006-5378 are not publicly available in the provided documents. The records describe an unspecified vulnerability with unknown impact. Monitor for updates; no file/version specifics or remediation are provided here.

9CVSS6.7AI score0.02895EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder