Lucene search
K

29 matches found

CNVD
CNVD
added 2024/11/07 12:0 a.m.1 views

Online Shopping Portal html_table.php File Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of file...

6.1CVSS6.2AI score0.00236EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.1 views

PHPGurukul Online Shopping Portal 跨站脚本漏洞

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of file...

6.1CVSS4.5AI score0.00236EPSS
Exploits1References5
Packet Storm
Packet Storm
added 2019/07/19 12:0 a.m.214 views

REDCap Cross Site Scripting

Exploit Title: REDCap - Details: Since it is an onkeypress event, it is triggered whenever the user touch any key and since the XSS payload is stored in the project name it appears in several pages. - Privileges: It requires admin privileges to store it. - Location example:...

4.3CVSS5.2AI score0.0061EPSS
Exploits4
Information Security Automation
Information Security Automation
added 2018/08/04 12:30 a.m.54 views

Sending tables from Atlassian Confluence to Splunk

Sometimes when we make automated analysis with Splunk, it might be necessary to use information that was entered or edited manually. For example, the classification of network hosts: do they belong to the PCI-DSS Scope or another group critical hosts or not. In this case, Confluence can be quite ...

7.2AI score
Exploits0
NVD
NVD
added 2018/06/27 8:29 p.m.10 views

CVE-2018-1355

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an...

6.1CVSS6.1AI score0.00227EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2018/06/27 8:0 p.m.9 views

CVE-2018-1355

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an...

6.5AI score0.00227EPSS
Exploits0References4
Fortinet
Fortinet
added 2018/06/22 12:0 a.m.24 views

OpenRedirect in Malicious Generated PDF Document on FortiAnalyzer and FortiManager

An open redirect vulnerability exists in FortiAnalyzer and FortiManager when a user of the GUI is converting an HTML table to a PDF document via the FortiView feature, due to lack of user input sanitization...

5.8CVSS1.3AI score0.00227EPSS
Exploits0Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2015/07/14 12:0 a.m.45 views

Microsoft Internet Explorer CTableSection Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

6.8CVSS6.4AI score0.28139EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2014/09/16 12:0 a.m.31 views

Microsoft Internet Explorer UpdateColumnAndColGroupStyles Remote Code Execution Vulnerability

This vulnerability may allow remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

5.1CVSS6.6AI score0.1418EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2014/09/16 12:0 a.m.33 views

Microsoft Internet Explorer CTableOMRowCache Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

6.8CVSS6.4AI score0.15762EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2014/09/16 12:0 a.m.29 views

Microsoft Internet Explorer CTableOMRowCache Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

6.8CVSS6.4AI score0.15762EPSS
Exploits0References1
Debian
Debian
added 2013/11/30 4:31 p.m.21 views

[SECURITY] [DSA 2807-1] links2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2807-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 30, 2013 http://www.debian.org/security/faq -...

4.3CVSS6AI score0.00377EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/01/15 12:0 a.m.38 views

Mozilla SeaMonkey 2.x <= 2.14 Multiple Vulnerabilities

Binary data 801376.prm...

10CVSS9.2AI score0.87365EPSS
Exploits27References45
0day.today
0day.today
added 2012/09/09 12:0 a.m.20 views

WAP Proof 2008 Denial of Service

Exploit for windows platform in category dos / poc WAP Proof 2008 Denial of Service Description : WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and...

7AI score
Exploits0
Exploit DB
Exploit DB
added 2012/09/08 12:0 a.m.24 views

WAP Proof 2008 - Denial of Service

Description : WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and a compatible GSM modems, such as Wavecom, Alcatel, Motorola, Nokia, Siemens, Sagem,...

7.4AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2010/01/21 12:0 a.m.28 views

Microsoft Internet Explorer Table Layout Col Tag Cache Update Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists when a Col element is used within an...

10CVSS1.9AI score0.35699EPSS
Exploits2References1
Packet Storm
Packet Storm
added 2010/01/11 12:0 a.m.36 views

Active Calendar 1.2.0 Cross Site Scripting

XSS Vulnerability in Active Calendar 1.2.0 Discovered by Martin Barbella Description of Vulnerability: ----------------------------- Active Calendar is PHP Class, that generates calendars year, month or week view as a HTML Table XHTML-Valid. From: http://micronetwork.de/activecalendar/index.php I...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2009/12/03 12:0 a.m.25 views

TEKUVA Authentication Bypass

!/usr/bin/perl Exploit: TEKUVA Password Reminder Authentication Bypass Date: 11/19/2009 Author: iqlusion [email protected] Software Link: http://download.cnet.com/Password-Reminder/3000-20644-10966598.html Version: 1.0.0.1 Info: TEKUVA Password Reminder is a password vault that allows you to...

0.5AI score
Exploits0
seebug.org
seebug.org
added 2009/11/21 12:0 a.m.25 views

TEKUVA Password Reminder Authentication Bypass

No description provided by source. !/usr/bin/perl Exploit: TEKUVA Password Reminder Authentication Bypass Date: 11/19/2009 Author: iqlusion [email protected] Software Link: http://download.cnet.com/Password-Reminder/3000-20644-10966598.html Version: 1.0.0.1 Info: TEKUVA Password Reminder is a...

7.1AI score
Exploits0
Symantec
Symantec
added 2009/07/28 12:0 a.m.14 views

Microsoft Internet Explorer HTML Table Object Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the browser. Successful exploits will compromise the browser and possibly the computer. Failed attacks may cause...

8.1AI score
Exploits0Affected Software4
Rows per page
Query Builder