Lucene search
+L

1520 matches found

OSV
OSV
•added 2021/12/17 8:41 p.m.•76 views

GHSA-7FR2-94H7-CCG2 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

7.5CVSS5.9AI score0.00932EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/16 8:15 p.m.•17 views

CVE-2020-35209

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

7.5CVSS5.8AI score0.00932EPSS
SaveExploits0References1
Mend
Mend
•added 2021/12/16 7:08 p.m.•4 views

CVE-2020-35209

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

8.7CVSS0.00932EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•20 views

Atomix 安全漏洞

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. An unspecified vulnerability exists in Atomix version 3.1.5. The vulnerability allows an unauthorized Atomix node to join the target cluster by providing configuration information. No detailed vulnerability details are...

7.5CVSS5.6AI score0.00932EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•5 views

CVE-2020-35209: Undefined Security Weakness

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

7.5CVSS5.8AI score0.00932EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/01 12:00 a.m.•3 views

PT-2021-16302

Name of the Vulnerable Software and Affected Versions: BP Better Messages WordPress plugin versions prior to 1.9.9.41 Description: The issue concerns the lack of CSRF checks in multiple AJAX actions within the plugin. Specifically, the affected actions include bp better messages leave chat, bp...

8.8CVSS0.00726EPSS
SaveExploits2References6
Microsoft KB
Microsoft KB
•added 2021/10/05 12:00 a.m.•12 views

October 5, 2021, update for Outlook 2016 (KB5001998)

None None...

6.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/09/07 8:15 p.m.•9 views

CVE-2021-37630

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed any user to join any "Secret Circle" without approval by the Circle owner leaking private information. It is recommended that Nextcloud Circles is...

6.5CVSS6.5AI score0.01202EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2021/08/16 12:00 a.m.•45 views

Mitel MiCollab Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in the "Join a Meeting" page of Mitel MiCollab, an enterprise collaboration software and tools platform solution, in versions prior to Mitel MiCollab 9.2 FP2. The vulnerability stems from insufficient input validation. An attacker could execute arbitrar...

6.1CVSS4AI score0.00586EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/13 4:15 p.m.•15 views

CVE-2021-27401

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

6.1CVSS6AI score0.00586EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/13 4:15 p.m.•37 views

CVE-2021-27401

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

6.1CVSS0.00586EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/13 4:15 p.m.•10 views

CVE-2021-27401

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

6.1CVSS5.6AI score0.00586EPSS
SaveExploits0References3
Prion
Prion
•added 2021/08/13 4:15 p.m.•24 views

Cross site scripting

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

4.3CVSS6.2AI score0.00586EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/08/13 3:18 p.m.•43 views

CVE-2021-27401

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

6.4AI score0.00586EPSS
SaveExploits0References2
CVE
CVE
•added 2021/08/13 3:18 p.m.•92 views

CVE-2021-27401

The Mitel MiCollab Web Client Join Meeting page is vulnerable to Cross‑Site Scripting (XSS) in versions before 9.2 FP2, caused by insufficient input validation. This could allow an attacker to view and modify user data. No exploitation details or remediation are provided in the connected documents.

6.1CVSS6.2AI score0.00586EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/13 12:00 a.m.•8 views

CVE-2021-27401: Improper Neutralization of Input During Web Page Generation

The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access view and modify user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting XSS...

6.1CVSS6.1AI score0.00586EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/08/13 12:00 a.m.•3 views

PT-2021-17440

Name of the Vulnerable Software and Affected Versions Mitel MiCollab Web Client versions prior to 9.2 FP2 Description The issue allows an attacker to access, view, and modify user data by executing arbitrary code due to insufficient input validation, also known as Cross-Site Scripting XSS. This...

6.1CVSS0.00586EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/08/13 12:00 a.m.•15 views

Mitel Networks MiCollab 跨站脚本漏洞

A cross-site scripting vulnerability exists in the "Join a Meeting" page of Mitel MiCollab, an enterprise collaboration software and tools platform solution, in versions prior to Mitel MiCollab 9.2 FP2. The vulnerability stems from insufficient input validation. An attacker could execute arbitrar...

6.1CVSS5.7AI score0.00586EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/12 10:15 p.m.•17 views

CVE-2021-28890

J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the 1 compId parameter to fast/sys/user/list, 2 deptId parameter to fast/sys/role/list, or 3 roleId parameter to fast/sys/role/authUser/list, related to the use of $ to join SQL statements...

9.8CVSS5.8AI score0.0134EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2021/08/10 7:28 a.m.•8 views

rust: optimization for joining strings can cause uninitialized bytes to be exposed

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS5.8AI score0.02025EPSS
SaveExploits0References4
Rows per page
Query Builder