Lucene search
+L

2955 matches found

CVE
CVE
•added 2013/07/02 2:00 p.m.•64 views

CVE-2013-2983

CVE-2013-2983 is an XSS vulnerability affecting IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The cross-site scripting flaw could allow a remote authenticated user to inject arbitrary web script or HTML via unspecified vectors. The connected IBM ...

3.5CVSS5.3AI score0.00767EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/07/02 12:00 a.m.•3 views

CVE-2013-0455: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.00942EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/07/02 12:00 a.m.•8 views

CVE-2013-2983: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Sterling File Gateway 2.2 and Sterling B2B Integrator allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2013-0468...

3.5CVSS5.8AI score0.00767EPSS
SaveExploits0References2
NVD
NVD
•added 2013/04/12 7:55 p.m.•24 views

CVE-2012-5937

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

9.3CVSS7.5AI score0.02594EPSS
SaveExploits0References3
Prion
Prion
•added 2013/04/12 7:55 p.m.•25 views

Code injection

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

9.3CVSS7.9AI score0.02594EPSS
SaveExploits0References3Affected Software4
CVE
CVE
•added 2013/04/12 7:00 p.m.•76 views

CVE-2012-5937

The CVE-2012-5937 issue affects IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0/5.1, and Sterling B2B Integrator 5.2, as used with IBM Sterling File Gateway 1.1–2.2. The CLA2 server contains an unspecified vulnerability that permits an unauthenticated attacker to execute arbitrary OS c...

9.3CVSS7.7AI score0.02594EPSS
SaveExploits0References3Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/04/12 12:00 a.m.•7 views

CVE-2012-5937: Undefined Security Weakness

Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors...

9.3CVSS6.4AI score0.02594EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2013/02/24 11:48 a.m.•8 views

CVE-2013-0108

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

6.8CVSS6.2AI score0.26639EPSS
SaveExploits9References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/02/24 12:00 a.m.•4 views

CVE-2013-0108: Improper Control of Generation of Code

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

6.8CVSS6.5AI score0.26639EPSS
SaveExploits9References2
Prion
Prion
•added 2012/11/17 9:55 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

4.3CVSS6.2AI score0.08693EPSS
SaveExploits2References5Affected Software1
CVE
CVE
•added 2012/11/17 9:00 p.m.•85 views

CVE-2012-5913

The CVE-2012-5913 vulnerability affects the WordPress Integrator plugin (version 1.32) for WordPress, specifically the wp-integrator.php file. The issue is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the redirect_to parameter to wp-login.php....

4.3CVSS5.9AI score0.08693EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2012/11/17 9:00 p.m.•33 views

CVE-2012-5913

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

5.7AI score0.08693EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/17 12:00 a.m.•6 views

CVE-2012-5913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

4.3CVSS6AI score0.08693EPSS
SaveExploits2References2
NVD
NVD
•added 2012/09/19 7:55 p.m.•27 views

CVE-2012-1653

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...

3.5CVSS5.3AI score0.0107EPSS
SaveExploits0References7
CVE
CVE
•added 2012/09/19 7:00 p.m.•56 views

CVE-2012-1653

The CVE-2012-1653 issue affects the Taxonomy Views Integrator (TVI) module for Drupal 6.x-1.x before 6.x-1.3. The vulnerability arises from insufficient filtering of user-supplied text on views pages, enabling XSS by authenticated users. Impact is limited to partial integrity of data and arbitrar...

3.5CVSS5.5AI score0.0107EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2012/09/19 7:00 p.m.•34 views

CVE-2012-1653

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...

5.3AI score0.0107EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/19 12:00 a.m.•5 views

CVE-2012-1653: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...

3.5CVSS6AI score0.0107EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2012/03/28 12:00 a.m.•28 views

WordPress Integrator 1.32 - Cross Site Scripting

WordPress Integrator "redirectto" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

4.3CVSS3.3AI score0.08693EPSS
SaveExploits2References1Affected Software1
exploitpack
exploitpack
•added 2012/03/28 12:00 a.m.•24 views

WordPress Plugin Integrator 1.32 - redirect_to Cross-Site Scripting

WordPress Plugin Integrator 1.32 - redirectto Cross-Site Scripting source: https://www.securityfocus.com/bid/52739/info WordPress Integrator is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

6.7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/03/28 12:00 a.m.•32 views

WordPress Integrator 1.32 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: WordPress plugin 'WordPress Integrator 1.32' XSS vulnerability Advisory ID: SSCHADV2012-010 Author: Stefan Schurtz Affected Software: Successfully tested on WordPress Integrator 1.32 Vendor URL:...

7.4AI score
SaveExploits0
Rows per page
Query Builder