Lucene search
+L

6731 matches found

Microsoft KB
Microsoft KB
added 2017/05/09 7:0 a.m.72 views

May 9, 2017—KB4019472 (OS Build 14393.1198)

None None...

9.3CVSS6.8AI score0.84138EPSS
SaveExploits26
Microsoft KB
Microsoft KB
added 2017/05/09 7:0 a.m.200 views

May 9, 2017—KB4019474 (OS Build 10240.17394)

None None...

9.3CVSS6.8AI score0.84138EPSS
SaveExploits26
Lenovo
Lenovo
added 2017/05/08 12:0 a.m.23 views

Lenovo Active Protection System Privilege Escalation - Lenovo Support US

No description provided...

5.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/05/07 7:23 p.m.18 views

monnaies-antiques.com XSS vulnerability

Vulnerable URL: http://monnaies-antiques.com/resultats.asp?langue=fr=...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/05/07 7:23 p.m.10 views

monnaies-billets-collection.fr XSS vulnerability

Vulnerable URL: http://monnaies-billets-collection.fr/resultats.asp?langue=fr=...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/05/07 5:47 p.m.11 views

einsteinrecovery.org XSS vulnerability

Open Bug Bounty ID: OBB-233374 Description| Value ---|--- Affected Website:| einsteinrecovery.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/05/06 6:48 p.m.12 views

comprendrechoisir.com XSS vulnerability

Vulnerable URL: http://www.comprendrechoisir.com/recherche?q=...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/05/06 7:3 a.m.11 views

valor.com.br XSS vulnerability

Vulnerable URL: http://www.valor.com.br/search/apachesolrsearch/...

6.9AI score
SaveExploits0
Talos
Talos
added 2017/05/04 12:0 a.m.60 views

AntennaHouse DMC HTMLFilter PPT DHFSummary Code Execution Vulnerability

Summary An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause a stack corruption resulting in arbitrary code execution. An attacker can send/provide maliciou...

8.3CVSS8.4AI score0.01299EPSS
SaveExploits2
CVE
CVE
added 2017/04/28 4:0 p.m.51 views

CVE-2017-2149

The CVE-2017-2149 issue is an Untrusted search path vulnerability in Toshiba memory card installers, enabling a Trojan horse DLL to be loaded from an unspecified directory and allowing code execution with user privileges. Affected software includes several FlashAir/TransferJet related tools and c...

9.3CVSS8.8AI score0.0299EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/04/28 4:0 p.m.26 views

CVE-2017-2149

Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card wit...

8.9AI score0.0299EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2017/04/27 8:26 a.m.9 views

mhahaber.com XSS vulnerability

Vulnerable URL: https://www.mhahaber.com/?s="/alert/OPENBUGBOUNTY/...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/04/24 2:28 p.m.13 views

drk.de XSS vulnerability

Vulnerable URL: https://www.drk.de/suche/?id=502kesearchpi1page=1kesearchpi1sword=test...

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2017/04/20 6:0 p.m.47 views

CVE-2016-8721

An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An...

9.1CVSS9.5AI score0.0328EPSS
SaveExploits2References1
Imperva Blog
Imperva Blog
added 2017/04/20 3:30 p.m.20 views

Shortening Your DCAP Short List: Five Critical Things to Consider for a Data-Centric Audit and Protection Solution

Exponential data growth. You’ve heard it many times before, but it’s still the most accurate way to describe the enormous and growing amount of data that businesses generate and collect today. It’s this growth that is driving today’s enterprises to revisit their strategies for data security and...

6.6AI score
SaveExploits0
NVD
NVD
added 2017/04/14 4:59 p.m.28 views

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

8.8CVSS8.9AI score0.10836EPSS
SaveExploits8References7
Prion
Prion
added 2017/04/14 4:59 p.m.21 views

Unrestricted file upload

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

6.5CVSS7.6AI score0.1055EPSS
SaveExploits8References7Affected Software1
Cvelist
Cvelist
added 2017/04/13 7:0 p.m.35 views

CVE-2016-8720

An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted HTTP request can inject a payload in the bkpath parameter which will be copied in to Location header of the HTTP...

3.1CVSS4.7AI score0.01362EPSS
SaveExploits2References1
Prion
Prion
added 2017/04/12 10:59 p.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML...

4.3CVSS6.3AI score0.01195EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/04/12 10:59 p.m.8 views

CVE-2016-1178

The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors...

6.5CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder