Lucene search
+L

6 matches found

NVD
NVD
•added 2025/12/09 4:17 p.m.•14 views

CVE-2025-42896

SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrit...

5.4CVSS0.00317EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2007-3480

Malware in sbrugna...

4.3CVSS6.4AI score0.01263EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2018/06/01 5:00 p.m.•33 views

CVE-2018-11581

Cross-site scripting XSS vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html...

5AI score0.01079EPSS
SaveExploits1References2
Prion
Prion
•added 2007/06/29 6:30 p.m.•26 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...

4.3CVSS6.1AI score0.01263EPSS
SaveExploits0References7Affected Software2
Cvelist
Cvelist
•added 2007/06/29 6:00 p.m.•32 views

CVE-2007-3495

Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...

5.8AI score0.01263EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/29 12:00 a.m.•5 views

CVE-2007-3495: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...

4.3CVSS5.9AI score0.01263EPSS
SaveExploits0References1
Rows per page
Query Builder