Lucene search
+L

360 matches found

OSV
OSV
added 2020/01/03 10:15 p.m.14 views

CVE-2019-9541

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5...

6.1CVSS5.9AI score0.0082EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/03 10:15 p.m.13 views

CVE-2019-9542

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

6.1CVSS6.5AI score0.00841EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/03 10:15 p.m.26 views

CVE-2019-9538

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling...

6.1CVSS6.2AI score0.00841EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/03 10:15 p.m.12 views

CVE-2019-9537

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

6.1CVSS6.5AI score0.00841EPSS
SaveExploits0References1
Prion
Prion
added 2020/01/03 10:15 p.m.20 views

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

4.3CVSS6.2AI score0.00841EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/01/03 10:15 p.m.20 views

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

4.3CVSS6.2AI score0.00841EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/01/03 10:15 p.m.21 views

Cross site scripting

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling...

4.3CVSS6.2AI score0.00841EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/01/03 9:55 p.m.31 views

CVE-2019-9541 Telos Automated Message Handling System information disclosure in itemlookup.asp

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5...

6.2AI score0.0082EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/03 9:55 p.m.34 views

CVE-2019-9542 Telos Automated Message Handling System reflected XSS in itemlookup.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

6.2AI score0.00841EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/03 9:55 p.m.174 views

CVE-2019-9539

Telos Automated Message Handling System (AMHS) contains a cross-site scripting vulnerability in ModalWindowPopup.asp. Multiple connected sources confirm that AMHS versions prior to 4.1.5.5 are affected by an improper neutralization of user input during web page generation, enabling an attacker to...

6.1CVSS6.2AI score0.00841EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/01/03 9:55 p.m.34 views

CVE-2019-9539 Telos Automated Message Handling System reflected XSS in ModalWindowPopup.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling Syst...

6.2AI score0.00841EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/03 9:55 p.m.34 views

CVE-2019-9540 Telos Automated Message Handling System reflected XSS in prefs.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions...

6.2AI score0.00841EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/03 9:55 p.m.31 views

CVE-2019-9537 Telos Automated Message Handling System reflected XSS in uploaditem.asp

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

6.2AI score0.00841EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/03 9:55 p.m.178 views

CVE-2019-9538

CVE-2019-9538 affects Telos Automated Message Handling System (AMHS). A Cross-Site Scripting vulnerability exists in the LDAP cbURL parameter, allowing an attacker to inject arbitrary script into an AMHS session. Affected versions are AMHS prior to 4.1.5.5. CVSS data in the records shows CVSS v3....

6.1CVSS6.2AI score0.00841EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/01/03 9:55 p.m.29 views

CVE-2019-9538 Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling...

6.2AI score0.00841EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/05 1:15 p.m.28 views

CVE-2016-10773

cPanel before 60.0.25 allows format-string injection in exception-message handling SEC-171...

8.8CVSS8.9AI score0.01054EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/05 1:15 p.m.23 views

Format string

cPanel before 60.0.25 allows format-string injection in exception-message handling SEC-171...

6.5CVSS7.4AI score0.01054EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/05/06 4:29 p.m.24 views

CVE-2019-3564

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift...

7.5CVSS7.1AI score0.01994EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2019/04/26 12:00 a.m.31 views

Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities

According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by following multiple vulnerabilities - Multiple vulnerabilities in the handling of Inter-Access Point Protocol IAPP messages by Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacen...

7.4CVSS6.9AI score0.00646EPSS
SaveExploits0References7
CVE
CVE
added 2019/04/18 12:45 a.m.73 views

CVE-2019-1796

CVE-2019-1796 affects Cisco Wireless LAN Controller (WLC) software due to improper validation of input in Inter-Access Point Protocol (IAPP) messages. An unauthenticated adjacent attacker can send malicious IAPP messages to trigger a reload of the WLC, causing a DoS. Affected software versions in...

7.4CVSS6.5AI score0.00646EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder