Lucene search
+L

26145 matches found

ATTACKERKB
ATTACKERKB
added 2023/07/20 7:15 p.m.19 views

CVE-2023-37602

An arbitrary file upload vulnerability in the component /workplace!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

6.1CVSS6.7AI score0.00614EPSS
SaveExploits1References2
NVD
NVD
added 2023/07/20 9:15 a.m.30 views

CVE-2023-3784

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS4.2AI score0.0057EPSS
SaveExploits1References4
OSV
OSV
added 2023/07/20 9:15 a.m.10 views

CVE-2023-3784

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS3.8AI score0.0057EPSS
SaveExploits1References4
Prion
Prion
added 2023/07/20 9:15 a.m.20 views

Cross site scripting

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

4CVSS5.3AI score0.0057EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2023/07/20 8:02 a.m.34 views

CVE-2023-3784 Dooblou WiFi File Explorer cross site scripting

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The...

4CVSS5.5AI score0.0057EPSS
SaveExploits1References4
CVE
CVE
added 2023/07/20 8:02 a.m.61 views

CVE-2023-3784

CVE-2023-3784 affects Dooblou WiFi File Explorer 1.13.3. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the argument search/order/download/mode in an unspecified function. It can be exploited remotely and the public exploit is reported. Public details confirm the...

5.4CVSS4.4AI score0.0057EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/07/20 12:00 a.m.20 views

CVE-2023-37602

An arbitrary file upload vulnerability in the component /workplace!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

8AI score
SaveExploits0References3
Exploit DB
Exploit DB
added 2023/07/20 12:00 a.m.217 views

Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities

Exploit Title: Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2317 Release Date: ============= 2023-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 2317 Common...

5.3AI score
SaveExploits0
CNNVD
CNNVD
added 2023/07/20 12:00 a.m.10 views

Alkacon Software OpenCMS 跨站脚本漏洞

Alkacon Software OpenCMS is Germany's Alkacon Software a set of open source Java and XML-based content management system CMS. The system supports template engine, WYSIWYG editor and so on. A security vulnerability exists in Alkacon Software OpenCMS version 15.0, which is caused by an arbitrary fi...

6.1CVSS6.6AI score0.00614EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/07/20 12:00 a.m.12 views

Dooblou WiFi File Explorer 跨站脚本漏洞

Dooblou WiFi File Explorer is a free WiFi file explorer from Dooblou. A cross-site scripting vulnerability exists in Dooblou WiFi File Explorer version 1.13.3, which stems from the parameter search/order/download/mode that causes cross-site scripting...

5.4CVSS4.2AI score0.0057EPSS
SaveExploits1References5
CVE
CVE
added 2023/07/20 12:00 a.m.82 views

CVE-2023-37602

CVE-2023-37602 affects Alkacon OpenCMS v15.0, specifically the /workplace#!explorer component. The Arbitrary file upload vulnerability allows an attacker to upload a crafted PNG to execute arbitrary code. The NVD entry reports a CVSS v3.1 base score of 6.1 (Medium) with Network access, Low attack...

6.1CVSS6.6AI score0.00614EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/13 12:00 a.m.12 views

The vulnerability of the Internet Explorer (IE) browser of Microsoft Edge allows attackers to carry out spoofing attacks.

The vulnerability of the Internet Explorer IE browser in Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to carry out spear-phishing attacks by opening a specially created malicious web page...

3.1CVSS6.4AI score0.00609EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2023/07/12 12:00 a.m.31 views

Microsoft Internet Explorer Security Feature Bypass Vulnerability (KB5028167)

This host is missing an important security update according to Microsoft KB5028167 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.5CVSS9.5AI score0.01114EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2023/07/11 6:37 p.m.12 views

austinexplorer.com Cross Site Scripting vulnerability OBB-3504795

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2023/07/11 7:00 a.m.102 views

July 11, 2023—KB5028168 (OS Build 17763.4645) - EXPIRED

None None...

9.8CVSS6.8AI score0.02207EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2023/07/11 7:00 a.m.69 views

Internet Explorer help

None None...

7.8CVSS7AI score0.10049EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/30 1:51 p.m.29 views

Security Bulletin: IBM Watson Explorer affected by vulnerability in OpenSSL

Summary IBM Watson Explorer Foundational Components contains a vulnerable version of OpenSSL. Vulnerability Details CVEID:CVE-2023-2650 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw when using OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIM...

7.5CVSS7.4AI score0.75116EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/30 1:49 p.m.42 views

Security Bulletin: IBM Watson Explorer is affected by vulnerabilities in Spring Framework

Summary IBM Watson Explorer contains a vulnerable version of Spring Framework. Vulnerability Details CVEID:CVE-2023-20863 DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of service, caused by improper input validation. By sending a specially crafted SpEL expression, a remote...

6.5CVSS7.1AI score0.01122EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/30 1:47 p.m.36 views

Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2023-24998)

Summary IBM Watson Explorer contains a vulnerable version of IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request parts to be processe...

7.5CVSS7.7AI score0.46836EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/30 1:42 p.m.38 views

Security Bulletin: IBM Watson Explorer is affected by multiple vulnerabilities in Java

Summary IBM Watson Explorer contains a vulnerable version of Java. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition related to the JSSE component could allow an unauthenticated attacker to cause high...

7.4CVSS6.8AI score0.01536EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder