Lucene search
+L

3960 matches found

Cvelist
Cvelist
•added 2021/01/06 4:53 p.m.•42 views

CVE-2019-16954

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

5.7AI score0.01327EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/06 12:00 a.m.•4 views

CVE-2019-16954: Improper Neutralization of Input During Web Page Generation

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

5.4CVSS5.8AI score0.01327EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/01/06 12:00 a.m.•14 views

SolarWinds Web Help Desk 注入漏洞

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. An HTML injection vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct an HTML injection attack via a Comment in a Help Request work order...

5.4CVSS6AI score0.01327EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/01/05 12:00 a.m.•18 views

SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2021-01529)

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct a cross-site scripting attack via a CSV template file with a specially craft...

5.4CVSS6.1AI score0.01347EPSS
SaveExploits1References1
OSV
OSV
•added 2021/01/04 8:15 a.m.•16 views

CVE-2019-16960

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

5.4CVSS6.1AI score0.01347EPSS
SaveExploits1References3
NVD
NVD
•added 2021/01/04 8:15 a.m.•27 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

5.4CVSS5.3AI score0.0173EPSS
SaveExploits1References3
OSV
OSV
•added 2021/01/04 8:15 a.m.•14 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

5.4CVSS5.8AI score0.0173EPSS
SaveExploits1References3
NVD
NVD
•added 2021/01/04 8:15 a.m.•33 views

CVE-2019-16960

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

5.4CVSS5.2AI score0.01347EPSS
SaveExploits1References3
Prion
Prion
•added 2021/01/04 8:15 a.m.•26 views

Design/Logic Flaw

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

3.5CVSS5.2AI score0.01347EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2021/01/04 8:15 a.m.•24 views

Cross site request forgery (csrf)

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

3.5CVSS5.2AI score0.0173EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/01/04 8:00 a.m.•50 views

CVE-2019-16960

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

5.2AI score0.01347EPSS
SaveExploits1References3
CVE
CVE
•added 2021/01/04 7:56 a.m.•216 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 is affected by a Cross‑Site Scripting (XSS) vulnerability exploitable via the Request Type parameter in a ticket. The connected sources confirm the affected product and vulnerability class but do not provide exploit details, affected versions beyond 12.7.0, or a re...

5.4CVSS5.3AI score0.0173EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/01/04 7:56 a.m.•50 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

5.3AI score0.0173EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/01/04 12:00 a.m.•20 views

Solarwinds WebHelpDesk 跨站脚本漏洞

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct a cross-site scripting attack via a CSV template file with a specially craft...

5.4CVSS5.9AI score0.01347EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/01/04 12:00 a.m.•16 views

SolarWinds Web Help Desk 跨站脚本漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0 that...

5.4CVSS5.9AI score0.0173EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/04 12:00 a.m.•7 views

CVE-2019-16960: Improper Neutralization of Input During Web Page Generation

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

5.4CVSS5.7AI score0.01347EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/04 12:00 a.m.•5 views

CVE-2019-16956: Improper Neutralization of Input During Web Page Generation

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

5.4CVSS5.8AI score0.0173EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2020/12/31 9:54 p.m.•357 views

Exploit for Deserialization of Untrusted Data in Apache Tomcat

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache...

7CVSS7.9AI score0.5552EPSS
SaveExploits17
CNVD
CNVD
•added 2020/12/23 12:00 a.m.•7 views

Command Execution Vulnerability in Homework Help Live Classes Student Side PC Client Software

Homework Help Live Classes is a premium online live tutoring product under Homework Help. Homework Help Live Classes student-side pc client software has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into the client process. An attacker can...

7.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2020/12/22 4:37 p.m.•42 views

Security Bulletin: Vulnerabilities in IBM Rational Synergy's Help System (CVE-2013-0464, CVE-2013-0467, CVE-2013-0599)

Summary IBM Rational Synergy can be affected by three vulnerabilities in the IBM Eclipse Help System IEHS, which is used to display the IBM Rational Synergy help content. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow thi...

5CVSS0.6AI score0.02153EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder