CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3227 matches found

Atlassian•added 2017/03/14 4:40 a.m.•32 views

XSS Vulnerability in wiki markup

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-51825. panel Luke Jahnke of the Australia Post Digital Mailbox Security Team reported to Atlassian an XSS in nesting various...

1.8AI score

SaveExploits0Affected Software1

Apache Tomcat•added 2017/03/13 12:00 a.m.•95 views

Fixed in Apache Tomcat 9.0.0.M18

Low: Information Disclosure CVE-2017-5648 While investigating bug 60718, it was noticed that some calls to application listeners did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to...

9.1CVSS9.2AI score0.13225EPSS

SaveExploits0Affected Software1

UbuntuCve•added 2017/03/10 12:00 a.m.•31 views

CVE-2017-5040

V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page...

4.3CVSS6.8AI score0.2224EPSS

SaveExploits0References3

UbuntuCve•added 2017/03/10 12:00 a.m.•30 views

CVE-2017-5030

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page...

8.8CVSS7.3AI score0.41603EPSS

SaveExploits1References4

Drupal•added 2017/03/01 12:00 a.m.•17 views

RestWS - Moderately Critical - Information Disclosure - SA-CONTRIB-2017-024

RestWS makes Drupal Entity data available in a REST API. The module doesn’t sufficiently check for access to properties when filtering queries. This vulnerability is mitigated by the fact that an attacker must have a role that allows them to access an entity type with access-controlled properties...

7AI score

SaveExploits0References11

Drupal•added 2017/03/01 12:00 a.m.•20 views

AES - Critical - Unsupported - SA-CONTRIB-2017-027

This module provides an API that allows other modules to encrypt and decrypt data using the AES encryption algorithm. The module does not follow requirements for encrypting data safely. An attacker who gains access to data encrypted with this module could decrypt it more easily than should be...

6.8AI score

SaveExploits0References12

Drupal•added 2017/03/01 12:00 a.m.•15 views

Location Map - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-026

This module enables you to display one simple location map via Google Maps. The module doesn't sufficiently sanitize user input in the configuration text fields of the module allows any tags and does not respect text format configuration. This vulnerability is mitigated by the fact that an attack...

6.9AI score

SaveExploits0References11

Packet Storm•added 2017/02/25 12:00 a.m.•61 views

Joomla Civicrm 1.6 SQL Injection

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

0.7AI score

SaveExploits0

Packet Storm•added 2017/02/25 12:00 a.m.•82 views

Joomla Profiler 1.4 SQL Injection

0.8AI score

SaveExploits0

Packet Storm•added 2017/02/25 12:00 a.m.•84 views

Joomla Fabrik 1.4 / 1.5 Cross Site Scripting

7.4AI score

SaveExploits0

Packet Storm•added 2017/02/25 12:00 a.m.•66 views

Joomla Sgpprojects 3.1 SQL Injection

0.6AI score

SaveExploits0

Packet Storm•added 2017/02/24 12:00 a.m.•67 views

Joomla JaJobBoard 1.5 SQL Injection

0.1AI score

SaveExploits0

Packet Storm•added 2017/02/24 12:00 a.m.•66 views

Joomla Redshop 1.4 / 1.5 SQL Injection

0.1AI score

SaveExploits0

Drupal•added 2017/02/22 12:00 a.m.•15 views

Timezone Detect - Moderately Critical - Cross Site Request Forgery - SA-CONTRIB-2017-020

This module enables sites to automatically detect and set user timezones via JavaScript. The module does not sufficiently protect against Cross-Site Request Forgery CSRF: an attacker could use this vulnerability to manipulate a user's timezone setting. The security implication of this issue depen...

7AI score

SaveExploits0References11

Packet Storm•added 2017/02/20 12:00 a.m.•46 views

Joomla Docman 1.6 SQL Injection

0.1AI score

SaveExploits0

Packet Storm•added 2017/02/20 12:00 a.m.•45 views

Joomla DCRC 1.6 SQL Injection

0.1AI score

SaveExploits0

Packet Storm•added 2017/02/20 12:00 a.m.•53 views

Joomla Maxcomment 1.6 SQL Injection

0.4AI score

SaveExploits0

Packet Storm•added 2017/02/19 12:00 a.m.•69 views

Joomla DJCatalog2 1.5 SQL Injection

0.2AI score

SaveExploits0

Drupal•added 2017/02/15 12:00 a.m.•29 views

Search API Sorts - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-016

The Search API Sorts module allows the site administrator to configure custom sort options for their search results and expose the control interface via the core block system. The module doesn't sufficiently sanitise the name of the sort option which is displayed to users. This vulnerability is...

6.8AI score

SaveExploits0References14

seebug.org•added 2017/02/13 12:00 a.m.•116 views

Apache Tomcat denial of service vulnerability, CVE-2016-6817）

The HTTP/2 header parser entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible. This was fixed in revision 1765794. This issue was reported as 60232 on 10 October 2016 and the security implications identified by...

5CVSS8.2AI score0.0719EPSS

SaveExploits1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by