Lucene search
+L

5 matches found

myhack58
myhack58
•added 2017/05/23 12:00 a.m.•50 views

Bitdefender in processing PE code signing the organizationName field when there is buffer overflow vulnerability-vulnerability warning-the black bar safety net

A vulnerability summary This paper describes the Bitdefender PE engine in the presence of a buffer overflow vulnerability. Bitdefender provides“anti-malware antimalware”of the engine, the engine can be integrated to other security vendors ' products, Bitdefender in their products, such as...

0.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/11/09 12:00 a.m.•40 views

ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS

The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...

4.3CVSS5.8AI score0.07686EPSS
SaveExploits6References3
CNVD
CNVD
•added 2015/06/26 12:00 a.m.•16 views

Zoho ManageEngine AssetExplorer Cross-Site Scripting Vulnerability (CNVD-2015-04108)

Zoho ManageEngine AssetExplorer is a suite of asset management software from Zoho ZOHO. A cross-site scripting vulnerability exists in ZOHO ManageEngine AssetExplorer version 6.1 due to the VendorDef.do file failing to adequately filter the 'organizationName' parameter. A remote attacker can...

3.5CVSS6AI score0.02344EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/24 12:00 a.m.•6 views

CVE-2015-5061: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the organizationName parameter to VendorDef.do...

3.5CVSS5.9AI score0.02344EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2015/06/24 12:00 a.m.•3 views

PT-2015-6759

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine AssetExplorer versions 6.1 service pack 6112 and earlier Description A cross-site scripting XSS issue allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the...

3.5CVSS5.9AI score0.02344EPSS
SaveExploits1References4
Rows per page
Query Builder