Lucene search
+L

8 matches found

Rapid7 Blog
Rapid7 Blog
•added 2024/11/20 4:42 p.m.•17 views

Multiple Vulnerabilities in Wowza Streaming Engine (Fixed)

Wowza Streaming Engine below v4.9.1 is vulnerable to multiple vulnerabilities on Linux and Windows. An unauthenticated attacker can poison the Wowza Streaming Engine Manager web dashboard with a stored cross-site scripting “XSS” payload. When an administrator views the poisoned dashboard,...

9.6CVSS7.7AI score0.00996EPSS
SaveExploits0
OSV
OSV
•added 2019/08/05 6:15 p.m.•17 views

CVE-2019-11198

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

6.1CVSS6.4AI score0.0108EPSS
SaveExploits0References2
NVD
NVD
•added 2019/08/05 6:15 p.m.•26 views

CVE-2019-11198

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

6.1CVSS6.1AI score0.0108EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/05 6:15 p.m.•28 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

4.3CVSS6AI score0.0108EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/05 5:13 p.m.•34 views

CVE-2019-11198

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

6.1AI score0.0108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/05 12:00 a.m.•5 views

PT-2019-12176

Name of the Vulnerable Software and Affected Versions Sitecore CMS versions 9.0.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple modules, including the List Manager Dashboard, Campaign Creator, Attributes field, Icon Selection, Latitu...

6.1CVSS0.0108EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/05 12:00 a.m.•7 views

CVE-2019-11198: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

6.1CVSS5.9AI score0.0108EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2017/11/13 8:43 p.m.•224 views

Faraday v2.7 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you have alwasy been looking for! It maps and leverages all the data you generate in real time , letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the risks and impacts and risks being assessed by the...

9.3AI score
SaveExploits0References2
Rows per page
Query Builder