Lucene search
+L

120 matches found

osv_ubuntu
osv_ubuntu
•added 2019/11/22 11:15 p.m.•19 views

UBUNTU-CVE-2019-11291

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated malicious use...

4.8CVSS5.3AI score0.00796EPSS
SaveExploits0References3
Prion
Prion
•added 2019/11/22 11:15 p.m.•17 views

Cross site scripting

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated malicious use...

3.5CVSS4.6AI score0.00796EPSS
SaveExploits0References2Affected Software2
Mend
Mend
•added 2019/11/22 10:56 p.m.•9 views

CVE-2019-11291

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated malicious use...

4.8CVSS0.00796EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/22 12:00 a.m.•3 views

CVE-2019-11291: Improper Neutralization of Input During Web Page Generation

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated malicious use...

4.8CVSS4.7AI score0.00796EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/10/25 12:00 a.m.•4 views

PT-2019-6377

Name of the Vulnerable Software and Affected Versions Pivotal RabbitMQ versions prior to 3.7.20 Pivotal RabbitMQ version 3.8 prior to 3.8.1 RabbitMQ for PCF versions 1.16.x prior to 1.16.7 RabbitMQ for PCF versions 1.17.x prior to 1.17.4 Description The issue is related to the improper sanitizati...

4.9CVSS0.00796EPSS
SaveExploits0References16
CNVD
CNVD
•added 2018/05/18 12:00 a.m.•20 views

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-11858)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An information disclosure vulnerability exists in the handling of the U3D Node Name buffer in Foxit Reader version 9.0.0.29935, where the program fails to properly validate user-submitted data. The vulnerability can ...

6.5CVSS6.2AI score0.02398EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/05/17 3:29 p.m.•22 views

CVE-2018-10480

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5AI score0.02398EPSS
SaveExploits0References2
NVD
NVD
•added 2018/05/17 3:29 p.m.•33 views

CVE-2018-10480

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.2AI score0.02398EPSS
SaveExploits0References2
Prion
Prion
•added 2018/05/17 3:29 p.m.•35 views

Code injection

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS6.2AI score0.02398EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2018/05/17 3:00 p.m.•48 views

CVE-2018-10480

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8AI score0.02398EPSS
SaveExploits0References2
CVE
CVE
•added 2018/05/17 3:00 p.m.•89 views

CVE-2018-10480

Foxit Reader 9.0.0.29935 is affected by CVE-2018-10480 due to improper validation in the handling of the U3D Node Name buffer, causing a read past the end of an allocated buffer. The vulnerability can disclose sensitive information and, in conjunction with other vulnerabilities, may allow code ex...

6.5CVSS6.5AI score0.02398EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/17 12:00 a.m.•8 views

CVE-2018-10480: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.8AI score0.02398EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2018/05/04 12:00 a.m.•47 views

Foxit Reader U3D Node Name Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

6.5CVSS1.4AI score0.02398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/05/04 12:00 a.m.•9 views

PT-2018-9901

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.0.0.29935 Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious fil...

6.5CVSS6.1AI score0.02398EPSS
SaveExploits0References4
CNVD
CNVD
•added 2018/03/15 12:00 a.m.•17 views

ClusterLabs pcs Cross-Site Scripting Vulnerability

ClusterLabs pcs is a command line tool for configuring Pacemaker. A cross-site scripting vulnerability exists in versions of ClusterLabs pcs prior to 0.9.157 that stems from the program failing to properly validate the Node name field. An attacker can exploit the vulnerability to run JavaScript...

6.1CVSS6.3AI score0.01176EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/03/12 3:29 p.m.•27 views

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

6.1CVSS6.2AI score
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2018/03/12 3:29 p.m.•18 views

UBUNTU-CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

6.1CVSS6.6AI score0.01176EPSS
SaveExploits0References4
Prion
Prion
•added 2018/03/12 3:29 p.m.•19 views

Cross site scripting

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

4.3CVSS5.9AI score0.01176EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2018/03/12 3:29 p.m.•27 views

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

6.1CVSS6.1AI score0.01176EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2018/03/12 3:29 p.m.•12 views

DEBIAN-CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

6.1CVSS6.3AI score0.01176EPSS
SaveExploits0References1
Rows per page
Query Builder