Lucene search
+L

2624 matches found

Citrix
Citrix
•added 2018/01/23 12:00 a.m.•21 views

Fall back from TCP to UDP fails / displays SSL Error when Disconnecting and Reconnecting session via NetScaler

If HDX Adaptive Transport Policy set to Preferred on DDC and when attempting to connect to an Application or Desktop using Citrix Receiver for Windows 4.10 or Citrix Receiver for Mac 12.8 or Citrix Receiver for iOS 7.5 and above, you may encounter below issues: Session will get disconnect if...

7AI score
SaveExploits0
OSV
OSV
•added 2018/01/18 10:29 p.m.•68 views

DEBIAN-CVE-2018-5776

WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...

6.1CVSS5.8AI score0.02018EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/01/18 10:29 p.m.•35 views

CVE-2018-5776

WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...

6.1CVSS6.3AI score0.02018EPSS
SaveExploits0References4
OSV
OSV
•added 2018/01/18 10:29 p.m.•18 views

UBUNTU-CVE-2018-5776

WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...

6.1CVSS6.3AI score0.02018EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/18 12:00 a.m.•1 views

CVE-2018-5776: Improper Neutralization of Input During Web Page Generation

WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...

6.1CVSS6.3AI score0.02018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/01/18 12:00 a.m.•3 views

PT-2018-17139

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 4.9.2 Description: The issue concerns a cross-site scripting XSS problem in the Flash fallback files in MediaElement, located under wp-includes/js/mediaelement. Recommendations: For WordPress versions prior to 4.9....

6.1CVSS0.02018EPSS
SaveExploits0References12
Veracode
Veracode
•added 2018/01/17 8:19 a.m.•17 views

POODLE Attack

crypto/tls in github.com/golang/go is vulnerable to the POODLE attack. The vulnerability exists due to the default SSLv3 fallback configuration in crypto/tls...

6.6AI score
SaveExploits0
Patchstack
Patchstack
•added 2018/01/17 12:00 a.m.•12 views

WordPress 3.7-4.9.1 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability found in WordPress 3.7-4.9.1 versions in the Flash fallback files in MediaElement, a library that is included with WordPress. Solution Update your Wordpress to the latest available version at least 4.9.2...

2.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/01/08 7:29 p.m.•10 views

DEBIAN-CVE-2015-2320

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...

9.8CVSS7.3AI score0.03539EPSS
SaveExploits0References1
OSV
OSV
•added 2018/01/08 7:29 p.m.•15 views

CVE-2015-2320

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...

9.8CVSS9.5AI score
SaveExploits0References9
NVD
NVD
•added 2018/01/08 7:29 p.m.•42 views

CVE-2015-2320

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...

9.8CVSS8.7AI score0.03539EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2018/01/08 7:00 p.m.•47 views

CVE-2015-2320

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...

8.6AI score0.03539EPSS
SaveExploits0References7
Mend
Mend
•added 2018/01/08 7:00 p.m.•2 views

CVE-2015-2320

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...

9.8CVSS0.03539EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•4 views

CVE-2015-2320: Improper Certificate Validation

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...

9.8CVSS8.2AI score0.03539EPSS
SaveExploits0References2
OSV
OSV
•added 2017/12/20 11:29 p.m.•17 views

CVE-2017-14387

The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings including the NFS export security flavor for authentication that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly...

6.5CVSS5.8AI score0.00914EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/12/20 11:00 p.m.•41 views

CVE-2017-14387

The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings including the NFS export security flavor for authentication that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly...

6.5AI score0.00914EPSS
SaveExploits0References2
CVE
CVE
•added 2017/12/20 11:00 p.m.•66 views

CVE-2017-14387

The CVE-2017-14387 issue concerns EMC Isilon OneFS NFS exports. The affected products are OneFS versions 8.1.0.0, 8.0.1.0–8.0.1.1, and 8.0.0.0–8.0.0.4. The flaw is that changes to the default NFS export security flavor are not consistently propagated to all new and existing NFS exports configured...

6.5CVSS6.4AI score0.00914EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/20 12:00 a.m.•6 views

CVE-2017-14387: Undefined Security Weakness

The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings including the NFS export security flavor for authentication that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly...

6.5CVSS6.6AI score0.00914EPSS
SaveExploits0References1
Veracode
Veracode
•added 2017/11/01 2:50 p.m.•13 views

Downgrade Attack

The openssl gem is vulnerable to downgrade attacks. A malicious user can signal a protocol with a fallback flag even if the server supports a more secure of TLS, allowing a malicious user to conduct attacks through previously patched vulnerabilities...

6.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/06 12:00 a.m.•4 views

CVE-2014-8492: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

6.1CVSS6.4AI score0.01214EPSS
SaveExploits1References2
Rows per page
Query Builder