Lucene search
+L

2788 matches found

NCSC
NCSC
•added 2024/07/17 1:54 p.m.•15 views

Vulnerability fixed in Oracle Hyperion

A vulnerability has been fixed in Oracle Hyperion. A malicious party could exploit the vulnerability to launch attacks that could result in the following categories of damage: Denial-of-Service DoS. Oracle has made updates available to fix the vulnerabilities. See the references for more...

5.5CVSS7.8AI score0.00144EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:46 p.m.•5 views

Malicious code in hyperion-form (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 12:46 p.m.•12 views

MAL-2024-2497 Malicious code in hyperion-form (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:46 p.m.•4 views

Malicious code in hyperion-autologging (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 12:46 p.m.•10 views

MAL-2024-2496 Malicious code in hyperion-autologging (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/05/23 8:46 a.m.•18 views

hyperion-records.co.uk Cross Site Scripting vulnerability OBB-3930011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2024/04/25 12:15 p.m.•29 views

CVE-2024-4174

Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...

5.4CVSS5.3AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/25 12:15 p.m.•22 views

CVE-2024-4175

Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerability could allow an attacker to send a malicious payload with Unicode characters that will be replaced by ASCII characters...

5.4CVSS5.3AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/25 11:51 a.m.•27 views

CVE-2024-4175 Improper Input Validation vulnerability in Hyperion Web Server

Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerability could allow an attacker to send a malicious payload with Unicode characters that will be replaced by ASCII characters...

5.4CVSS6.8AI score0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/25 11:51 a.m.•96 views

CVE-2024-4175

The CVE-2024-4175 entry concerns Hyperion Web Server (version 2.0.15) with a Unicode transformation vulnerability. The underlying issue allows a attacker-supplied payload using Unicode characters that will be replaced by ASCII characters, potentially affecting data integrity and confidentiality (...

5.4CVSS6.7AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/25 11:44 a.m.•22 views

CVE-2024-4174 Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server

Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...

5.4CVSS5.3AI score0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/25 11:44 a.m.•100 views

CVE-2024-4174

CVE-2024-4174 is a Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server, affecting version 2.0.15. The issue allows an attacker to execute malicious JavaScript in the client by injecting code into the URL. Documented impact is client-side code execution; no exploitation vectors or in-t...

5.4CVSS6AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/25 11:44 a.m.•38 views

CVE-2024-4174 Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server

Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...

5.4CVSS5.5AI score0.00308EPSS
SaveExploits0References1
Mend
Mend
•added 2024/04/25 11:44 a.m.•2 views

CVE-2024-4174

Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...

5.4CVSS0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/25 12:00 a.m.•20 views

Hyperion 输入验证错误漏洞

Hyperion is an open source bias or ambient lighting implementation of the Hyperion project. An input validation error vulnerability exists in Hyperion version 2.0.15 that stems from the presence of a Unicode conversion vulnerability that could allow an attacker to send Unicode characters with a...

5.4CVSS6.7AI score0.00308EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•3 views

CVE-2024-4174: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL...

5.4CVSS6.2AI score0.00308EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•5 views

CVE-2024-4175: Improper Input Validation

Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerability could allow an attacker to send a malicious payload with Unicode characters that will be replaced by ASCII characters...

5.4CVSS5.9AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•4 views

PT-2024-29548

Name of the Vulnerable Software and Affected Versions Hyperion Web Server version 2.0.15 Description The issue is a Cross-Site Scripting XSS vulnerability that could allow an attacker to execute malicious Javascript code on the client by injecting that code into the URL. Recommendations For...

5.4CVSS6.2AI score0.00308EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•4 views

PT-2024-29552

Name of the Vulnerable Software and Affected Versions Hyperion version 2.0.15 Description The issue allows an attacker to send a malicious payload with Unicode characters that will be replaced by ASCII characters. Recommendations For Hyperion version 2.0.15, update to a version that fixes the...

5.4CVSS0.00308EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/25 12:00 a.m.•16 views

Hyperion 跨站脚本漏洞

Hyperion is an open source bias or ambient lighting implementation of the Hyperion project. A cross-site scripting vulnerability exists in Hyperion version 2.0.15, which stems from the presence of a cross-site scripting XSS vulnerability that could allow an attacker to execute malicious Javascrip...

5.4CVSS6.1AI score0.00308EPSS
SaveExploits0References2
Rows per page
Query Builder