CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1794 matches found

Hacker One•added 2016/03/26 12:11 a.m.•54 views

Uber: Stored XSS in drive.uber.com WordPress admin panel

There is another bug in the All In One Event Calendar plugin used on drive.uber.com. An attacker can inject arbitrary JavaScript in the administrative Dashboard of WordPress. The script would be evaluated under administrator privileges as only logged-in administrators can view the Dashboard. Such...

6.5AI score

SaveExploits0

osv_cve•added 2016/03/01 11:59 a.m.•25 views

CVE-2016-2560

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted Host HTTP header, related to libraries/Config.class.php; 2 crafted JSON data, relat...

6.1CVSS6.4AI score0.02705EPSS

SaveExploits0References11

osv_debian•added 2016/03/01 11:59 a.m.•25 views

DEBIAN-CVE-2016-2560

6.1CVSS6.4AI score0.02705EPSS

SaveExploits0References1

UbuntuCve•added 2016/03/01 11:59 a.m.•40 views

CVE-2016-2560

6.1CVSS6.8AI score0.02705EPSS

SaveExploits0References7

Prion•added 2016/03/01 11:59 a.m.•40 views

Cross site scripting

4.3CVSS6.5AI score0.02705EPSS

SaveExploits0References11Affected Software1

osv_ubuntu•added 2016/03/01 11:59 a.m.•20 views

UBUNTU-CVE-2016-2560

6.1CVSS6.9AI score0.02705EPSS

SaveExploits0References8

Mend•added 2016/03/01 11:00 a.m.•9 views

CVE-2016-2560

6.1CVSS0.02705EPSS

SaveExploits0References13

Cvelist•added 2016/03/01 11:00 a.m.•68 views

CVE-2016-2560

6.4AI score0.02705EPSS

SaveExploits0References11

CVE•added 2016/03/01 11:00 a.m.•120 views

CVE-2016-2560

The CVE-2016-2560 issue affects phpMyAdmin series: 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML through several vectors (crafted H...

6.1CVSS6.2AI score0.02705EPSS

SaveExploits0References11Affected Software1

Debian CVE•added 2016/03/01 11:00 a.m.•61 views

CVE-2016-2560

6.1CVSS6.8AI score0.02705EPSS

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2016/03/01 12:00 a.m.•9 views

CVE-2016-2560: Improper Neutralization of Input During Web Page Generation

6.1CVSS6.9AI score0.02705EPSS

SaveExploits0References2

FreeBSD•added 2016/02/29 12:00 a.m.•41 views

phpmyadmin -- multiple XSS and a man-in-the-middle vulnerability

The phpMyAdmin development team reports: XSS vulnerability in SQL parser. Using a crafted SQL query, it is possible to trigger an XSS attack through the SQL query page. We consider this vulnerability to be non-critical. Multiple XSS vulnerabilities. By sending a specially crafted URL as part of t...

6.8CVSS1.4AI score0.02705EPSS

SaveExploits0References4

Packet Storm•added 2016/02/22 12:00 a.m.•48 views

ManageEngine Firewall Analyzer 8.5 SQL Injection

================================================================ ManageEngine Firewall Analyzer 8.5 SQL Query Execution Vulnerability ================================================================ Description : Vulnerability Type : ManageEngine Firewall Analyzer 8.5 SQL Query Execution...

0.9AI score

SaveExploits0

Mend•added 2016/02/20 1:00 a.m.•5 views

CVE-2016-2045

Cross-site scripting XSS vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response...

5.4CVSS0.01544EPSS

SaveExploits0References7

Cvelist•added 2016/02/20 1:00 a.m.•59 views

CVE-2016-2045

5.4AI score0.01544EPSS

SaveExploits0References5

Positive Technologies•added 2016/02/20 12:00 a.m.•4 views

PT-2016-4986

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.5.x prior to 4.5.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response, due to a cross-site scripting XSS vulnerability in t...

7.5CVSS0.02725EPSS

SaveExploits3References139

htbridge•added 2016/01/07 12:00 a.m.•558 views

SQL Injection in TestLink

High-Tech Bridge Security Research Lab discovered high-risk SQL injection vulnerability in TestLink Open Source Test Management. The vulnerability can be exploited to alter the present SQL query and gain access to potentially sensitive information or even to completely compromise the vulnerable w...

8.9AI score

SaveExploits0Affected Software1

Exploit DB•added 2016/01/05 12:00 a.m.•49 views

PHPIPAM 1.1.010 - Multiple Vulnerabilities

Exploit Title: PHPIPAM v1.1.010 Multiple Vulnerabilities Date: 04/01/2016 Author: Mickael Dorigny @ Synetis Vendor or Software Link: http://phpipam.net/ Version: 1.1.010 Category: Multiple Vulnerabilities Tested on : 1.1.010 PHPIPAM description :...

5.3AI score

SaveExploits0

BDU FSTEC•added 2015/11/20 12:00 a.m.•20 views

Cisco Secure Access Control System SQLi

The vulnerability of the Solution Engine component of the Cisco Secure Access Control System relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted URL...

6.5CVSS6AI score0.01361EPSS

SaveExploits0References2

Positive Technologies•added 2015/10/28 12:00 a.m.•8 views

PT-2015-2586

Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions before B FRN 15.003 Description The issue is related to a lack of protection against SQL query structure attacks. Exploitation of this issue may allow a remote attacker to...

6.5CVSS0.04292EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by