Lucene search
+L

85 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/02 12:00 a.m.•1 views

CVE-2020-36608: Improper Neutralization

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

6.1CVSS4.2AI score0.00428EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/11/02 12:00 a.m.•7 views

CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

3.5CVSS4.1AI score0.00428EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/02 12:00 a.m.•56 views

CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

3.5CVSS6AI score0.00428EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/13 12:00 a.m.•23 views

PT-2022-15300 · Huawei · Hwlog

Name of the Vulnerable Software and Affected Versions: Huawei HWLog affected versions not specified Description: The DFX module has a Use-After-Free UAF vulnerability. Successful exploitation of this vulnerability may affect system stability. Recommendations: At the moment, there is no informatio...

7.8CVSS7.4AI score0.00697EPSS
SaveExploits0References6
NVD
NVD
•added 2021/07/07 2:15 p.m.•36 views

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

6.5CVSS0.01123EPSS
SaveExploits2References2
Prion
Prion
•added 2021/07/07 2:15 p.m.•27 views

Information disclosure

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

4CVSS6.3AI score0.01123EPSS
SaveExploits2References2Affected Software3
CVE
CVE
•added 2021/07/07 1:32 p.m.•61 views

CVE-2020-24038

CVE-2020-24038 affects myFax version 229, where the export log module logs sensitive information, enabling access to critical data by any user. The Red Hat, CNVD, CNNVD and related records corroborate an information disclosure flaw rooted in the export logging, resulting in exposure of sensitive ...

6.5CVSS6.3AI score0.01123EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2021/07/07 1:32 p.m.•39 views

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

6.4AI score0.01123EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/07 12:00 a.m.•4 views

CVE-2020-24038: Insertion of Sensitive Information into Log File

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information...

6.5CVSS5.8AI score0.01123EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/07/07 12:00 a.m.•16 views

MyFax 日志信息泄露漏洞

myFax is a software application. A complete fax solution for the Internet. A security vulnerability exists in myFax that stems from version 229 of myFax logging sensitive information in the export log module, which can be exploited by an attacker to access critical information...

6.5CVSS5.6AI score0.01123EPSS
SaveExploits2References2
OSV
OSV
•added 2021/07/01 5:00 p.m.•64 views

GHSA-H58V-C6RF-G9F7 Cross site scripting in the system log

Impact It is possible to inject code into the tllog table that will be executed in the browser when the system log is called in the back end. Patches Update to Contao 4.9.16 or 4.11.5. Workarounds Disable the system log module in the back end for all users especially admin users. References...

6.1CVSS6.2AI score0.0074EPSS
SaveExploits0References6
CNVD
CNVD
•added 2019/11/04 12:00 a.m.•28 views

SECUDOS DOMOS Log Module Cross-Site Scripting Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A cross-site scripting vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6. The vulnerability stems from the lack of proper validation of client-side data in the...

5.4CVSS6.4AI score0.00575EPSS
SaveExploits1References1
OSV
OSV
•added 2019/11/02 3:15 p.m.•17 views

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

7.5CVSS7.1AI score0.14855EPSS
SaveExploits0References3
NVD
NVD
•added 2019/11/02 3:15 p.m.•18 views

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

5.4CVSS5.5AI score0.00575EPSS
SaveExploits1References2
NVD
NVD
•added 2019/11/02 3:15 p.m.•31 views

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

7.5CVSS7.5AI score0.14855EPSS
SaveExploits0References3
OSV
OSV
•added 2019/11/02 3:15 p.m.•13 views

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

5.4CVSS6.1AI score0.00575EPSS
SaveExploits1References2
Prion
Prion
•added 2019/11/02 3:15 p.m.•21 views

Cross site scripting

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

3.5CVSS5.5AI score0.00575EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2019/11/02 3:15 p.m.•27 views

Design/Logic Flaw

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

5CVSS7.4AI score0.14855EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/11/02 2:28 p.m.•27 views

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

5.5AI score0.00575EPSS
SaveExploits1References2
CVE
CVE
•added 2019/11/02 2:28 p.m.•160 views

CVE-2019-18664

The affected software is SECUDOS DOMOS, specifically the Log module. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Log module prior to version 5.6, arising from insufficient validation of client-side data in the web application. Impact is client-side code execution within the affe...

5.4CVSS5.5AI score0.00575EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder