Lucene search
+L

3960 matches found

CNNVD
CNNVD
•added 2022/09/11 12:00 a.m.•20 views

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No information about this vulnerability is available at this time, so please stay tuned to...

6.1CVSS6.2AI score0.00443EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/11 12:00 a.m.•5 views

CVE-2022-40323: Improper Neutralization of Input During Web Page Generation

SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR 67241...

6.1CVSS6.3AI score0.00443EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/11 12:00 a.m.•5 views

CVE-2022-40324: Improper Neutralization of Input During Web Page Generation

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...

6.1CVSS6.4AI score0.00443EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/11 12:00 a.m.•16 views

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No information about this vulnerability is available at this time, so please stay tuned to...

6.1CVSS6.2AI score0.00443EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/11 12:00 a.m.•12 views

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No information about this vulnerability is available at this time, so please stay tuned to...

6.1CVSS6.2AI score0.00443EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/11 12:00 a.m.•5 views

CVE-2022-40322: Improper Neutralization of Input During Web Page Generation

SysAid Help Desk before 22.1.65 allows XSS, aka FR 66542 and 65579...

6.1CVSS6.4AI score0.00443EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/11 12:00 a.m.•15 views

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel.Desk is a writing, blogging and note-taking application for individual developers. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No...

6.1CVSS6.2AI score0.00443EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/11 12:00 a.m.•11 views

PT-2022-25350 · Sysaid · Sysaid Help Desk

Name of the Vulnerable Software and Affected Versions: SysAid Help Desk versions prior to 22.1.65 Description: The issue allows for XSS via the Asset Dashboard. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

6.1CVSS6.1AI score0.00443EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/11 12:00 a.m.•4 views

CVE-2022-40325: Improper Neutralization of Input During Web Page Generation

SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR 67262...

6.1CVSS6.4AI score0.00443EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/26 12:15 a.m.•17 views

CVE-2022-36121

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...

5.3CVSS6.1AI score0.00784EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/08/26 12:15 a.m.•7 views

CVE-2022-36121

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...

5.3CVSS5.8AI score0.00784EPSS
SaveExploits0References4
CVE
CVE
•added 2022/08/25 11:02 p.m.•91 views

CVE-2022-36121

Blue Prism Enterprise 6.0–7.01 is affected by a vulnerability that exists when the Blue Prism Application server is misconfigured, allowing an authenticated user to reverse engineer the software and bypass access controls on the UpdateOfflineHelpData function. This enables changing the offline he...

5.3CVSS5.1AI score0.00784EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/08/25 11:02 p.m.•39 views

CVE-2022-36121

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...

5.4AI score0.00784EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•28 views

PT-2022-23209 · Blue Prism · Blue Prism Enterprise

Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: An issue was discovered in a misconfigured environment that exposes the Blue Prism Application server, allowing an authenticated user to reverse engineer the Blue Prism software and...

5.3CVSS5AI score0.00784EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•13 views

Blue Prism Enterprise 安全漏洞

Blue Prism Enterprise is an intelligent robotic process automation RPA software from Blue Prism UK. A security vulnerability exists in Blue Prism Enterprise versions 6.0 through 7.01 that originates in a misconfigured environment that exposes the Blue Prism application server, which allows an...

5.3CVSS5.5AI score0.00784EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•4 views

CVE-2022-36121: Undefined Security Weakness

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...

5.3CVSS6AI score0.00784EPSS
SaveExploits0References1
Veracode
Veracode
•added 2022/08/20 9:46 a.m.•31 views

Cross-site Scripting (XSS)

jenkins is vulnerable to cross-site scripting. The vulnerability exists because the help icon does not escape the feature name that is part of its tooltip which allows an attacker to inject and execute arbitrary javascript...

5.4CVSS6.7AI score0.01527EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
•added 2022/08/11 6:08 a.m.•55 views

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates. The highlights for Kali’s 2022.3’s release: Discord Server - Kali’s new community real-time chat option has launched! Test Lab Environment - Quickly create a test bed to learn, practice, and...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/08/09 12:00 a.m.•16 views

WordPress plugin JS Help Desk 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin JS...

5.4CVSS5.5AI score0.00453EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/03 12:00 a.m.•12 views

WordPress Plugin JS Help Desk SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.6CVSS5.7AI score0.00443EPSS
SaveExploits0References2
Rows per page
Query Builder