CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2018/12/03 10:29 p.m.•14 views

CVE-2018-14704

Cross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via a malformed URL path...

6.1CVSS5.8AI score0.00707EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2018/12/03 12:00 a.m.•5 views

CVE-2018-14704: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via a malformed URL path...

6.1CVSS7AI score0.00707EPSS

SaveExploits1References2

Positive Technologies•added 2018/12/03 12:00 a.m.•6 views

PT-2018-12676

Name of the Vulnerable Software and Affected Versions Drobo 5N2 NAS version 4.0.5-13.28.96115 Description The issue concerns cross-site scripting in the MySQL API error page, allowing attackers to execute JavaScript via a malformed URL path. Recommendations For Drobo 5N2 NAS version...

6.1CVSS0.00707EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by