Lucene search
+L

2860 matches found

CNNVD
CNNVD
added 2022/05/16 12:0 a.m.8 views

Parallels H-Sphere 跨站脚本漏洞

Parallels H-Sphere is a web-hosting automation control panel from Parallels, Inc. It is used for shared web hosting services. Parallels H-Sphere version 3.6.2 contains a cross-site scripting vulnerability that can be exploited by attackers to perform XSS via indexen.php in the parameters...

6.1CVSS5.8AI score0.02243EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/13 1:32 a.m.56 views

GHSA-4W62-CQ5R-5MMQ express-cart unrestricted file upload vulnerability

Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...

8.8CVSS8.7AI score0.2745EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/05/13 1:32 a.m.21 views

express-cart unrestricted file upload vulnerability

Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...

9CVSS6.9AI score0.2745EPSS
SaveExploits1References4Affected Software1
Slackware Linux
Slackware Linux
added 2022/05/04 9:32 p.m.89 views

[slackware-security] openssl

New openssl packages are available for Slackware 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssl-1.1.1o-i586-1slack15.0.txz: Upgraded. Fixed a bug in the crehash script which was not properly sanitising shell...

10CVSS0.6AI score0.82612EPSS
SaveExploits5
Kitploit
Kitploit
added 2022/04/26 12:30 p.m.28 views

Bore - Simple CLI Tool For Making Tunnels To Localhost

A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust cargo install bore-cli On your local machine bore local 8000 --to bore.pub This will expose your local...

7.1AI score
SaveExploits0References3
Wired Threat Level
Wired Threat Level
added 2022/04/25 4:8 p.m.13 views

The US Saw a Spike in Child Sexual Abuse URLs in 2021

CSAM hosting in the United States rose 64 percent last year, putting the country second in the world, a new report found...

0.1AI score
SaveExploits0
Citrix
Citrix
added 2022/04/25 12:0 a.m.10 views

Unable to create Azure hosting connection in On-Premise Studio

When trying to create a new Azure hosting connection in on-premise Studio, it may fail with the following error: Error Id: XDDS:09449CBF Exception: Error Source : Citrix Studio StackTrace: System.Net.WebException The remote server returned an error: 400 Bad Request. at System.Net.HttpWebRequest...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/04/22 12:0 a.m.31 views

Cisco IOS Software IOx Application Hosting Environment (cisco-sa-iox-yuXQ6hFj)

According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities: - Multiple parameter injection vulnerabilities in the Cisco IOx application hosting environment. Due to incomplete sanitization of parameters that are part of an application package, an authenticated, remot...

9CVSS6.8AI score0.02531EPSS
SaveExploits4References24
CNVD
CNVD
added 2022/04/19 12:0 a.m.64 views

WordPress WP Maintenance plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress...

4.8CVSS0.8AI score0.00514EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/19 12:0 a.m.5 views

Oracle Virtualization 输入验证错误漏洞

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation. Oracle VM VirtualBox is a virtual machine management software for Oracle Virtualization. VirtualBox is vulnerable to an input validation error that allows a low privilege attacker to log into the infrastructur...

3.8CVSS8.2AI score0.00354EPSS
SaveExploits0References6
NVD
NVD
added 2022/04/15 3:15 p.m.31 views

CVE-2022-20727

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

7.2CVSS0.01043EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/15 3:15 p.m.23 views

CVE-2022-20720

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

9CVSS0.01414EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/15 3:15 p.m.24 views

CVE-2022-20726

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

7.5CVSS0.01057EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/15 3:15 p.m.34 views

CVE-2022-20723

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

9CVSS0.01987EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/15 3:15 p.m.6 views

CVE-2022-20721

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

4.9CVSS6.1AI score0.01232EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/15 3:15 p.m.24 views

CVE-2022-20718

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

9CVSS0.02201EPSS
SaveExploits1References2
NVD
NVD
added 2022/04/15 3:15 p.m.23 views

CVE-2022-20719

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

9CVSS0.02531EPSS
SaveExploits1References2
NVD
NVD
added 2022/04/15 3:15 p.m.31 views

CVE-2022-20725

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

5.5CVSS0.00601EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/15 3:15 p.m.25 views

CVE-2022-20721

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

6.8CVSS0.01232EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/15 3:15 p.m.28 views

CVE-2022-20722

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

6.8CVSS0.01232EPSS
SaveExploits0References2
Rows per page
Query Builder