Lucene search
+L

87 matches found

Prion
Prion
added 2017/03/28 2:59 a.m.24 views

Design/Logic Flaw

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fa...

2.1CVSS6.9AI score0.01367EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/03/28 2:46 a.m.35 views

CVE-2016-9471

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fa...

3.9AI score0.01367EPSS
SaveExploits0References3
CVE
CVE
added 2017/03/28 2:46 a.m.57 views

CVE-2016-9471

The vulnerability CVE-2016-9471 affects Revive Adserver prior to 3.2.5 and 4.0.0, caused by insufficient filtering of usernames during user creation. Specifically, control characters were not filtered, allowing apparently identical usernames to co-exist and enabling potential user spoofing. Explo...

3.1CVSS4.1AI score0.01367EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/03/14 10:59 p.m.15 views

CVE-2016-8017

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...

4.1CVSS5.8AI score0.06901EPSS
SaveExploits4References4
NVD
NVD
added 2017/03/14 10:59 p.m.29 views

CVE-2016-8017

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...

4.1CVSS3.5AI score0.06901EPSS
SaveExploits4References4
Cvelist
Cvelist
added 2017/03/14 10:00 p.m.42 views

CVE-2016-8017

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to read files on the webserver via a crafted user input...

5AI score0.06901EPSS
SaveExploits4References4
CERT
CERT
added 2016/12/12 12:00 a.m.63 views

McAfee VirusScan for Linux contains multiple vulnerabilities

Overview McAfee VirusScan for Linux contains multiple vulnerabilities. Description McAfee VirusScan for Linux version 2.0.3 and prior is vulnerable to the following:CWE-200: Information Exposure - CVE-2016-8016 Multiple pages within the web interface utilize a tplt parameter. An authenticated...

8.1CVSS7.9AI score0.13293EPSS
SaveExploits7References2
Rows per page
Query Builder