Lucene search
+L

6152 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/15 12:00 a.m.•7 views

CVE-2020-35748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fvwpfvvideoplayersrc JSON field in the data parameter...

5.4CVSS6AI score0.00931EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/01/15 12:00 a.m.•7 views

PT-2021-11842

Name of the Vulnerable Software and Affected Versions: FV Flowplayer Video Player plugin versions prior to 7.4.37.727 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via the fv wp fvvideoplayer src JSON field in the data parameter. This is a...

5.4CVSS5.7AI score0.00931EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2021/01/13 10:15 p.m.•30 views

CVE-2021-1161

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

7.2CVSS7.4AI score0.02289EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/01/13 10:15 p.m.•21 views

CVE-2021-1154

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

4.8CVSS6.1AI score0.00559EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/13 4:00 p.m.•11 views

CVE-2021-1153

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

4.8CVSS5.9AI score0.00559EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/01/13 12:00 a.m.•30 views

Cisco Small Business cross-site scripting vulnerabilities

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A stored cross-site scripting vulnerability exists in the Web management interface of the Cisco...

4.8CVSS6AI score0.00559EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/13 12:00 a.m.•13 views

PT-2021-1693 · Cisco · Cisco Small Business Rv130W +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected routers. These vulnerabilities...

9CVSS7.3AI score0.02474EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
•added 2021/01/07 12:14 p.m.•46 views

Extracting Personal Information from Large Language Models Like GPT-2

Researchers have been able to find all sorts of personal information within GPT-2. This information was part of the training data, and can be extracted with the right sorts of queries. Paper: "Extracting Training Data from Large Language Models." Abstract: It has become common to publish large...

1.9AI score
SaveExploits0
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•21 views

CVE-2020-35834

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10...

4.8CVSS5.8AI score0.0056EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•20 views

CVE-2020-35831

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...

8.1CVSS7.3AI score0.00874EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•19 views

CVE-2020-35842

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

5.4CVSS6.1AI score0.00547EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•20 views

CVE-2020-35812

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK20 before 2.3.5.26,...

4.8CVSS5.8AI score0.0056EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•16 views

CVE-2020-35817

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...

4.8CVSS5.8AI score0.00683EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•17 views

CVE-2020-35815

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...

4.8CVSS5.8AI score0.0056EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•18 views

CVE-2020-35810

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK20 before 2.3.5.26,...

4.8CVSS5.8AI score0.00656EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/30 12:15 a.m.•20 views

CVE-2020-35800

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2...

9.4CVSS5.8AI score0.01614EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/12/29 11:31 p.m.•44 views

CVE-2020-35833

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...

6.1CVSS6.2AI score0.0056EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2020/12/29 12:00 a.m.•32 views

Command Injection Vulnerability in Multiple NETGEAR Devices

Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are vulnerable to a command injection vulnerability that affects the following products and versions: D7800...

6.8CVSS5.8AI score0.00724EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/29 12:00 a.m.•26 views

Certain NETGEAR devices Cross-Site Scripting Vulnerability

Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are affected by a cross-site scripting vulnerability in the following products and versions: D7800 before...

6.1CVSS5.6AI score0.0056EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/29 12:00 a.m.•22 views

Certain NETGEAR devices Cross-Site Scripting Vulnerability

Netgear NETGEAR is a router from the American company Netgear. It is a hardware device that connects two or more networks and acts as a gateway between networks. Certain NETGEAR devices are affected by a cross-site scripting vulnerability in the following products and versions: D7800 before...

6.1CVSS5.6AI score0.00683EPSS
SaveExploits0References2
Rows per page
Query Builder