Lucene search
+L

1859 matches found

Citrix
Citrix
added 2021/04/01 12:00 a.m.12 views

".NET Framework Initialization Error" on Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. If a computer has .NET Framework version 4 installed and there are no older versions of the .NET...

7AI score
SaveExploits0
OSV
OSV
added 2021/03/30 12:16 p.m.12 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS6.1AI score0.01574EPSS
SaveExploits4References2
NVD
NVD
added 2021/03/30 12:16 p.m.35 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS0.01574EPSS
SaveExploits4References2
ATTACKERKB
ATTACKERKB
added 2021/03/30 12:16 p.m.5 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS5.1AI score0.01574EPSS
SaveExploits4References3
Prion
Prion
added 2021/03/30 12:16 p.m.21 views

Design/Logic Flaw

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

3.5CVSS5.1AI score0.01574EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
added 2021/03/30 12:00 p.m.39 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4AI score0.01574EPSS
SaveExploits4References2
CVE
CVE
added 2021/03/30 12:00 p.m.128 views

CVE-2021-28935

CMS Made Simple (CMSMS) 2.2.15 is affected by an authenticated cross‑site scripting (XSS) vulnerability in /admin/addbookmark.php via Site Admin > My Preferences > Title field. The issue allows an authenticated user to inject scripts, with CVSS:3.1 base score 5.4 (MEDIUM) and CVSS2 base sco...

5.4CVSS5.1AI score0.01574EPSS
SaveExploits4References2Affected Software1
CNNVD
CNNVD
added 2021/03/30 12:00 a.m.9 views

CMS Made Simple 跨站脚本漏洞

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in CMS Made Simple 2.2.15. The vulnerability can be exploited via /admin/addbookmark.php via Site Admin My Preferences Title field ...

5.4CVSS5.1AI score0.01574EPSS
SaveExploits4References5
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.14 views

The vulnerability of the prive/formulaires/configurer_preferences.php component of the SPIP content management system, related to a lack of mechanism for managing code generation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the prive/formulaires/configurerpreferences.php component of the SPIP content management system is related to a lack of mechanisms for managing code generation. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity...

9.8CVSS7.8AI score0.02194EPSS
SaveExploits0References4Affected Software2
Oracle linux
Oracle linux
added 2021/03/26 12:00 a.m.59 views

firefox security update

78.9.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.9.0-1 - Update to 78.9.0 build1...

8.8CVSS1.4AI score0.01404EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/03/24 12:00 a.m.8 views

Bitweaver 跨站脚本漏洞

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/preferences.php URI...

4.8CVSS5AI score0.00786EPSS
SaveExploits1References2
OSV
OSV
added 2021/03/17 3:15 p.m.9 views

CVE-2020-35455

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage...

7.8CVSS5.8AI score0.00235EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/17 3:15 p.m.18 views

CVE-2020-35455

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage...

7.8CVSS0.00235EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/17 3:15 p.m.26 views

Code injection

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage...

2.1CVSS7.4AI score0.00235EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/17 12:00 a.m.10 views

Google Play Diibear 安全漏洞

Google Play Diibear is an application from Google Play. It provides a feature that allows parents to use the application to stay in touch with the kindergarten and get information about their children's learning and play as well as kindergarten newsletters and announcements. A security...

7.8CVSS7.4AI score0.00235EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2021/02/26 12:00 a.m.71 views

thunderbird security update

78.8.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.8.0-1 - Update to 78.8.0 build1...

8.8CVSS2AI score0.0153EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/02/16 7:15 p.m.5 views

CVE-2021-27237

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...

4.8CVSS5.1AI score0.0096EPSS
SaveExploits1References4
Prion
Prion
added 2021/02/16 7:15 p.m.21 views

Design/Logic Flaw

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...

3.5CVSS4.7AI score0.0096EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/02/16 6:23 p.m.28 views

CVE-2021-27237

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...

5AI score0.0096EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/02/16 12:00 a.m.11 views

Blackcat Cms 跨站脚本漏洞

BlackCat CMS is a PHP5, HTML5 content management system. A stored cross-site scripting vulnerability exists in BlackCat CMS 1.3.6. The vulnerability can be exploited to conduct a cross-site scripting attack via the Display Name field in backend/preferences/ajaxsave.php...

4.8CVSS5.6AI score0.0096EPSS
SaveExploits1References4
Rows per page
Query Builder