Lucene search
K

8 matches found

UbuntuCve
UbuntuCve
added 2019/04/25 9:29 p.m.23 views

CVE-2018-19359

GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control...

8.8CVSS7.2AI score0.00282EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2019/04/25 9:29 p.m.20 views

CVE-2018-18643

GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS...

6.1CVSS6.7AI score0.00096EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2019/04/25 8:58 p.m.23 views

CVE-2018-19359

Removed by vendor...

8.8CVSS7.3AI score0.00282EPSS
Exploits1
exploitpack
exploitpack
added 2011/03/29 12:0 a.m.9 views

osCSS 2.1 - Multiple Cross-Site Scripting Local File Inclusions

osCSS 2.1 - Multiple Cross-Site Scripting Local File Inclusions source: https://www.securityfocus.com/bid/47074/info osCSS is prone to a cross-site scripting vulnerability and multiple local file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An...

6.8AI score
Exploits0
Packet Storm
Packet Storm
added 2011/03/29 12:0 a.m.24 views

osCSS2 2.1.0 RC12 Cross Site Scripting

------------------------------------------------------------------------ Software................osCSS2 2.1.0 RC12 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.oscss.org/ Disclosure Date.........4/6/2011 Tested...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2011/03/29 12:0 a.m.23 views

osCSS 2.1 - Multiple Cross-Site Scripting / Local File Inclusions

source: https://www.securityfocus.com/bid/47074/info osCSS is prone to a cross-site scripting vulnerability and multiple local file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

7.4AI score
Exploits0
CVE
CVE
added 2001/05/07 4:0 a.m.39 views

CVE-2000-0876

Vulnerability summary: WFTPD and WFTPD Pro 2.41 RC12 expose the server’s full pathname to remote attackers by issuing a "%C" command, which triggers an error message revealing the path. Affected products/components: WFTPD, WFTPD Pro 2.41 RC12. Root cause/technique: error-path disclosure in server...

5CVSS7AI score0.0073EPSS
Exploits0References3Affected Software2
Packet Storm
Packet Storm
added 2000/09/06 12:0 a.m.27 views

wftpd241-12.txt

================================================================= Blue Panda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC12 05/09/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: WFTPD will crash if a...

7.4AI score
Exploits0
Rows per page
Query Builder