Lucene search
+L

10757 matches found

ATTACKERKB
ATTACKERKB
added 2021/12/29 3:15 p.m.12 views

CVE-2021-4176

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS5.9AI score0.00785EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/12/29 12:00 a.m.41 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01688)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from vulnerability to input errors when generating web pages. No detailed vulnerability details are...

6.6CVSS5.2AI score0.0046EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/29 12:00 a.m.9 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.6CVSS5.4AI score0.00531EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/28 6:15 a.m.12 views

CVE-2021-4177

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS5.5AI score0.00924EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/12/26 12:00 a.m.10 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...

6.1CVSS5.6AI score0.00948EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/12/21 12:00 a.m.48 views

livehelperchat cross-site request forgery vulnerability (CNVD-2022-01694)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, and no detailed vulnerability details are provided at this time...

8.8CVSS8.6AI score0.00539EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/18 12:00 a.m.8 views

livehelperchat 跨站请求伪造漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, and no detailed vulnerability details are provided at this time...

8.8CVSS5.4AI score0.00539EPSS
SaveExploits1References3
Amazon
Amazon
added 2021/12/18 12:00 a.m.7 views

Medium: kernel-livepatch-4.14.248-189.473

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.248-189.473 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.248-189.473 or yum update --advisory ALAS2LIVEPATCH-2021-071 to update your system. New...

4.4CVSS7AI score0.00515EPSS
SaveExploits1
Amazon
Amazon
added 2021/12/18 12:00 a.m.13 views

Medium: kernel-livepatch-4.14.246-187.474

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.246-187.474 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.246-187.474 or yum update --advisory ALAS2LIVEPATCH-2021-072 to update your system. New...

4.4CVSS7AI score0.00515EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/17 5:30 p.m.119 views

Security Bulletin: Is Blueworks Live affected by CVE-2021-44228 (Log4j Vulnerability)?

Summary Is Blueworks Live affected by CVE-2021-44228 Log4j Vulnerability? Vulnerability Details Please refer to the Flash Alert published here: Get Notified about Future Security Bulletins Subscribe to My Notifications to be notified of important product support alerts like this. Off Related...

10CVSS0.7AI score0.99999EPSS
SaveExploits364
CNVD
CNVD
added 2021/12/17 12:00 a.m.41 views

livehelperchat Cross-Site Request Forgery Vulnerability (CNVD-2022-06911)

livehelperchat is available via Live Helper Chat, which provides free live support on the website. livehelperchat suffers from a cross-site request forgery vulnerability, which stems from the fact that livehelperchat is vulnerable to cross-site request forgery CSRF attacks. No details of the...

6.5CVSS3.2AI score0.00489EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/16 10:15 a.m.9 views

CVE-2021-4123

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS6.5AI score0.00489EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
added 2021/12/16 12:00 a.m.28 views

Crisp Live Chat < 0.32 - CSRF to Stored Cross-Site Scripting

The plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisppluginsettingspage function found in the /crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31...

8.8CVSS3.8AI score0.00608EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/12/16 12:00 a.m.7 views

PT-2021-6387 · Microsoft · Xbox Live Auth Manager For Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Xbox Live Auth Manager for Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Xbox Live Auth Manager service for Microsoft Windows,...

7CVSS7.4AI score0.00681EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/16 12:00 a.m.9 views

livehelperchat 跨站请求伪造漏洞

livehelperchat is available via Live Helper Chat, which provides free live support on the website. livehelperchat suffers from a cross-site request forgery vulnerability, which stems from the fact that livehelperchat is vulnerable to cross-site request forgery CSRF attacks. No details of the...

6.5CVSS5.4AI score0.00489EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2021/12/16 12:00 a.m.28 views

WordPress Crisp Live Chat plugin <= 0.31 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS discovered by José Aguilera in WordPress Crisp Live Chat plugin versions = 0.31. Solution Update the WordPress Crisp Live Chat plugin to the latest available version at least 0.32...

8.8CVSS1.9AI score0.00608EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/12/16 12:00 a.m.56 views

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2021:4099-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4099-1 advisory. This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

7.4CVSS6.9AI score0.06846EPSS
SaveExploits0References7
Akamai Blog
Akamai Blog
added 2021/12/15 2:00 p.m.12 views

Livery Delivers a Seamless Low Latency Streaming Experience with Help from Akamai

Our new normal has ushered in the advent of hybrid events — a mix of in-person and virtual events. This has made seamless live streaming with active participation of the audience, both live and remote, more important than ever. Amsterdam-headquartered company Livery is an end-to-end SaaS solution...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/12/15 12:00 a.m.61 views

SUSE SLES12: kernel-livepatch-4_12_14-150_75-default / etc (SUSE-SU-2021:4038-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4038-1 advisory. This update for the Linux Kernel 4.12.14-12291 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

7.4CVSS6.9AI score0.06846EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/12/15 12:00 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2021:4052-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.6AI score0.00332EPSS
SaveExploits0References5
Rows per page
Query Builder