Lucene search
+L

464 matches found

NVD
NVD
added 2018/05/23 2:29 p.m.31 views

CVE-2018-1310

Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release...

7.5CVSS8.3AI score0.03176EPSS
Exploits0References1
OSV
OSV
added 2018/05/23 2:29 p.m.34 views

CVE-2018-1310

Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release...

7.5CVSS8.1AI score0.03176EPSS
Exploits0References1
CVE
CVE
added 2018/05/23 2:0 p.m.98 views

CVE-2018-1310

CVE-2018-1310 affects Apache NiFi via JMS deserialization tied to the ActiveMQ client vulnerability CVE-2015-5254. The issue arises from deserializing untrusted JMS content, enabling denial of service as noted in the associated ActiveMQ advisories. Mitigation in NiFi is to upgrade the activemq-cl...

7.5CVSS8.2AI score0.03176EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/05/23 2:0 p.m.35 views

CVE-2018-1310

Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release...

8.3AI score0.03176EPSS
Exploits0References1
NVD
NVD
added 2018/04/12 3:29 p.m.14 views

CVE-2014-6309

The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway - JMS Edition 4.0.2, 4.0.3, and 4.0.4 allow remote attackers to obtain sensitive information via vectors related to HTTP request handling...

7.5CVSS7.2AI score0.01545EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/04/12 3:0 p.m.17 views

CVE-2014-6309

The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway - JMS Edition 4.0.2, 4.0.3, and 4.0.4 allow remote attackers to obtain sensitive information via vectors related to HTTP request handling...

7.2AI score0.01545EPSS
Exploits0References1
CVE
CVE
added 2018/04/12 3:0 p.m.53 views

CVE-2017-6910

The CVE-2017-6910 entry concerns Kaazing Gateway and related editions (Gateway JMS Edition, Community/Enterprise Editions) where the HTTP and WebSocket engine components allow remote attackers to bypass access restrictions and obtain sensitive information via HTTP request handling vectors. Affect...

7.5CVSS7.3AI score0.01966EPSS
Exploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2018/03/12 2:51 p.m.9 views

jms-servisni.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-578956 Description| Value ---|--- Affected Website:| jms-servisni.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

6.7AI score
Exploits0
Prion
Prion
added 2018/03/09 7:29 p.m.16 views

Code injection

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

6.5CVSS7.8AI score0.01672EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/03/09 7:29 p.m.22 views

CVE-2016-0276

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

6.5CVSS6.8AI score0.01672EPSS
Exploits0References2
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2018/03/05 12:0 a.m.509 views

JMS Music,1.1.1,SQL Injection

JMS Music by Joomasters, versions 1.1.1 and previous, SQL Injection...

4.1AI score
Exploits0References1Affected Software1
CNVD
CNVD
added 2018/02/06 12:0 a.m.5 views

JMS Music SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . JMS Music is used in one of the audio playback component . A SQL injection vulnerability exists in version 1.1.1 of Joomla! A...

9.8CVSS8AI score0.02652EPSS
Exploits2References1
Packet Storm
Packet Storm
added 2018/02/03 12:0 a.m.36 views

Joomla! JMS Music 1.1.1 SQL Injection

Exploit Title: Joomla! Component JMS Music 1.1.1 - SQL Injection Dork: N/A Date: 01.02.2018 Vendor Homepage: https://www.joommasters.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jms-music/ Version: 1.1.1 Category: Webapps Tested on:...

9.3AI score0.02652EPSS
Exploits2
OSV
OSV
added 2018/02/02 5:29 p.m.4 views

CVE-2018-6581

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

9.8CVSS5.8AI score0.02652EPSS
Exploits2References1
Prion
Prion
added 2018/02/02 5:29 p.m.12 views

Sql injection

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

7.5CVSS9.7AI score0.02652EPSS
Exploits2References1Affected Software1
NVD
NVD
added 2018/02/02 5:29 p.m.13 views

CVE-2018-6581

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

9.8CVSS9.8AI score0.02652EPSS
Exploits2References1
Cvelist
Cvelist
added 2018/02/02 5:0 p.m.18 views

CVE-2018-6581

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

9.9AI score0.02652EPSS
Exploits2References1
CVE
CVE
added 2018/02/02 5:0 p.m.54 views

CVE-2018-6581

CVE-2018-6581 is a SQL injection vulnerability affecting JMS Music 1.1.1 for Joomla!. The flaw occurs in the search functionality via the keyword/artist/username parameters, enabling remote SQL command injection. Public sources (NVD, CNVD, PacketStorm, CVE list) describe it with high/critical imp...

9.8CVSS9.7AI score0.02652EPSS
Exploits2References1Affected Software1
exploitpack
exploitpack
added 2018/02/02 12:0 a.m.17 views

Joomla! Component JMS Music 1.1.1 - SQL Injection

Joomla! Component JMS Music 1.1.1 - SQL Injection Exploit Title: Joomla! Component JMS Music 1.1.1 - SQL Injection Dork: N/A Date: 01.02.2018 Vendor Homepage: https://www.joommasters.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jms-music/...

Exploits0
0day.today
0day.today
added 2018/02/02 12:0 a.m.27 views

Joomla JMS Music 1.1.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JMS Music 1.1.1 - SQL Injection Dork: N/A Date: 01.02.2018 Vendor Homepage: https://www.joommasters.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jms-music...

7.1AI score
Exploits0
Rows per page
Query Builder