Lucene search
+L

13143 matches found

CNVD
CNVD
•added 2019/06/25 12:00 a.m.•21 views

Micro Focus NetIQ Self Service Password Reset Cross-Site Scripting Vulnerability

Micro Focus NetIQ Self Service Password Reset is a web-based password management solution. A cross-site scripting vulnerability exists in Micro Focus NetIQ Self Service Password Reset versions prior to 4.4, which can be exploited by attackers to conduct cross-site scripting attacks...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/06/24 4:15 p.m.•19 views

CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits0References1
NVD
NVD
•added 2019/06/24 4:15 p.m.•27 views

CVE-2019-11648

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...

7.5CVSS7.3AI score0.01111EPSS
SaveExploits0References1
Prion
Prion
•added 2019/06/24 4:15 p.m.•33 views

Cross site scripting

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

4.3CVSS5.9AI score0.00647EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/06/24 3:40 p.m.•74 views

CVE-2019-11648

CVE-2019-11648 concerns information leakage in Micro Focus NetIQ Self Service Password Reset (SSPR). The vulnerability affects all versions prior to 4.4 and can expose sensitive information. In the provided data, the CVSS metrics show a CVSS v3 base score of 7.5 (HIGH) with network attack vector,...

7.5CVSS7.2AI score0.01111EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/06/24 3:40 p.m.•40 views

CVE-2019-11648

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...

7.3AI score0.01111EPSS
SaveExploits0References1
CVE
CVE
•added 2019/06/24 3:27 p.m.•75 views

CVE-2019-11647

CVE-2019-11647 affects Micro Focus NetIQ Self Service Password Reset (web-based password management) prior to version 4.4. The connected CNVD entry confirms a cross-site scripting (XSS) vulnerability in this product, with the root cause described as a web-based XSS flaw that can be exploited to p...

6.1CVSS5.9AI score0.00647EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/06/24 3:27 p.m.•38 views

CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

6AI score0.00647EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/24 12:00 a.m.•8 views

CVE-2019-11648: Exposure of Sensitive Information to an Unauthorized Actor

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...

7.5CVSS5.8AI score0.01111EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/06/24 12:00 a.m.•3 views

PT-2019-12451

Name of the Vulnerable Software and Affected Versions Micro Focus NetIQ Self Service Password Reset Software versions prior to 4.4 Description An information leakage issue exists, potentially exposing sensitive information. Recommendations For versions prior to 4.4, update to version 4.4 or later...

7.5CVSS0.01111EPSS
SaveExploits0References3
Trend Micro Simply Security
Trend Micro Simply Security
•added 2019/06/21 6:03 p.m.•341 views

Movie Tech Review: Child’s Play 2019

A while back, Rik & Kasia Ferguson shared their thoughts on the movie, “Unfriended: The Dark Web.” The dark web and technology in general plays a pivotal role in the movie's plot, so the team decided it would be interesting to have a real-world expert review. Everyone had a lot of fun, and thus...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2019/06/21 12:00 a.m.•19 views

Micro Deal Factory SQL Injection Vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Micro Deal Factory is used in one of the web marketing promotion plug-ins. A SQL injection vulnerability exists in Joomla! The vulnerability stems from...

9.8CVSS8.2AI score0.0229EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2019/06/19 6:15 p.m.•15 views

CVE-2018-17386

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

9.8CVSS5.8AI score0.0229EPSS
SaveExploits1References2
NVD
NVD
•added 2019/06/19 6:15 p.m.•29 views

CVE-2018-17386

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

9.8CVSS9.9AI score0.0229EPSS
SaveExploits1References2
Prion
Prion
•added 2019/06/19 6:15 p.m.•26 views

Sql injection

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

7.5CVSS9.8AI score0.0229EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2019/06/19 5:15 p.m.•47 views

CVE-2019-11649

Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browser. The vulnerability could be exploite...

5.4CVSS5.4AI score0.00611EPSS
SaveExploits0References1
Prion
Prion
•added 2019/06/19 5:15 p.m.•26 views

Cross site scripting

Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browser. The vulnerability could be exploite...

3.5CVSS5.4AI score0.00611EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/06/19 5:10 p.m.•94 views

CVE-2018-17386

CVE-2018-17386 : The Joomla! Micro Deal Factory 2.4.0 component contains a SQL injection vulnerability via the id parameter or PATH_INFO routes (mydeals/ or listdeals/). Attackers could potentially execute arbitrary SQL commands against the underlying database. The description is consistently rep...

9.8CVSS9.8AI score0.0229EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2019/06/19 5:10 p.m.•28 views

CVE-2018-17386

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

9.9AI score0.0229EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/06/19 4:06 p.m.•52 views

CVE-2019-11649 KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649

Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browser. The vulnerability could be exploite...

5.4CVSS5.5AI score0.00611EPSS
SaveExploits0References1
Rows per page
Query Builder