Lucene search
+L

5 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•11 views

CVE-2026-102241: Use of Hard-coded Cryptographic Key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

5.1CVSS5.5AI score0.0022EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/31 12:00 a.m.•5 views

CVE-2014-8082: Exposure of Sensitive Information to an Unauthorized Actor

lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message...

5CVSS5.9AI score0.0262EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/09 12:00 a.m.•7 views

CVE-2013-7138: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System QCMS 4.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the start parameter...

5CVSS6AI score0.01859EPSS
SaveExploits6References2
NVD
NVD
•added 2010/08/23 10:00 p.m.•36 views

CVE-2010-2545

Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via 1 the name element in an XML template to templatesimport.php; and allow remote...

4.3CVSS5.3AI score0.01801EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/10 12:00 a.m.•5 views

CVE-2009-4237: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via 2 the key parameter to...

3.5CVSS6AI score0.03306EPSS
SaveExploits7References2
Rows per page
Query Builder