Lucene search
K

6654 matches found

Citrix
Citrix
added 2018/03/10 12:0 a.m.5 views

SecureMail: Unable to send emails "You cannot send the mail"

Only one user couldn't send mails, it failed with error message "You cannot send the mail" unable to send mails or reply to mails with or without attachment. The user is able to receive emails successfully...

7.1AI score
Exploits0
Vulnrichment
Vulnrichment
added 2018/03/08 7:0 a.m.13 views

CVE-2018-0213

A vulnerability in the credential reset functionality for Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to...

7.2AI score0.0092EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2018/03/07 3:50 p.m.10 views

paul-sacher-stiftung.ch XSS vulnerability

Open Bug Bounty ID: OBB-575922 Description| Value ---|--- Affected Website:| paul-sacher-stiftung.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Prion
Prion
added 2018/03/05 10:29 p.m.15 views

Input validation

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP...

6.8CVSS7.9AI score0.0032EPSS
Exploits0References3Affected Software3
UbuntuCve
UbuntuCve
added 2018/03/05 10:29 p.m.15 views

CVE-2018-7711

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP...

8.1CVSS7.2AI score0.0032EPSS
Exploits0References3
OSV
OSV
added 2018/03/05 10:29 p.m.17 views

CVE-2018-7711

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP...

8.1CVSS7.2AI score
Exploits0References3
Debian CVE
Debian CVE
added 2018/03/05 10:0 p.m.21 views

CVE-2018-7711

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP...

8.1CVSS8.1AI score0.0032EPSS
Exploits0
Cvelist
Cvelist
added 2018/03/05 10:0 p.m.15 views

CVE-2018-7711

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP...

7.9AI score0.0032EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/03/05 7:37 p.m.20 views

rails_admin ruby gem XSS

An exploitable cross site scripting XSS vulnerability exists in the add filter functionality of the railsadmin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish ...

6.1CVSS5.7AI score0.00397EPSS
Exploits3References5Affected Software1
OSV
OSV
added 2018/03/05 7:6 p.m.25 views

GHSA-W7Q9-XR2X-WH7X delayed_job_web Cross-site Scripting vulnerability

An exploitable cross site scripting XSS vulnerability exists in the filter functionality of the delayedjobweb rails gem versions 1.2.9 before 1.4.2. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attack...

6.1CVSS5.8AI score0.00398EPSS
Exploits3References7
Github Security Blog
Github Security Blog
added 2018/03/05 7:6 p.m.28 views

delayed_job_web Cross-site Scripting vulnerability

An exploitable cross site scripting XSS vulnerability exists in the filter functionality of the delayedjobweb rails gem versions 1.2.9 before 1.4.2. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attack...

6.1CVSS5.7AI score0.00398EPSS
Exploits3References7Affected Software1
CNVD
CNVD
added 2018/03/02 12:0 a.m.2 views

Moxa OnCell G3100-HSPA Series Authentication Bypass Vulnerability

The Moxa OnCell G3100-HSPA is an intelligent, feature-rich wireless communications platform that enables networked and serial devices to connect to cellular TCP/IP networks. An authentication bypass vulnerability exists in the Moxa OnCell G3100-HSPA Series that stems from an application allowing...

9.8CVSS7.3AI score0.00447EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2018/02/28 3:44 p.m.14 views

eve-ship.com XSS vulnerability

Open Bug Bounty ID: OBB-571138 Description| Value ---|--- Affected Website:| eve-ship.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/02/28 1:21 p.m.8 views

dom72.ru XSS vulnerability

Open Bug Bounty ID: OBB-571025 Description| Value ---|--- Affected Website:| dom72.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Fedora
Fedora
added 2018/02/27 5:31 p.m.26 views

[SECURITY] Fedora 27 Update: wavpack-5.1.0-7.fc27

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

7.8CVSS2.4AI score0.00879EPSS
Exploits2
OSV
OSV
added 2018/02/27 5:29 a.m.2 views

CVE-2018-4911

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API related to bookmark functionality. The...

8.8CVSS5.8AI score0.03981EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/02/27 5:0 a.m.14 views

CVE-2018-4911

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API related to bookmark functionality. The...

9.1AI score0.03981EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2018/02/25 2:0 a.m.17 views

vinnitsa.com XSS vulnerability

Open Bug Bounty ID: OBB-567772 Description| Value ---|--- Affected Website:| vinnitsa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
OSV
OSV
added 2018/02/24 9:13 a.m.10 views

OPENSUSE-SU-2018:0536-1 Security update for phpMyAdmin

This update for phpMyAdmin 4.7.8 fixes the following issues: - CVE-2018-7260: self-cross site scripting XSS vulnerability in the central columns feature boo1082188 This version also fixes some minor functionality bugs. The previous update already fixed CVE-2017-1000499...

8.8CVSS6.8AI score0.11439EPSS
Exploits6References3
OSV
OSV
added 2018/02/24 9:13 a.m.13 views

OPENSUSE-SU-2018:0534-1 Security update for phpMyAdmin

This update for phpMyAdmin 4.7.8 fixes the following issues: - CVE-2018-7260: self-cross site scripting XSS vulnerability in the central columns feature boo1082188 This version also fixes some minor functionality bugs. The previous update already fixed CVE-2017-1000499...

8.8CVSS6.8AI score0.11439EPSS
Exploits6References3
Rows per page
Query Builder