Lucene search
+L

4090 matches found

Mend
Mend
•added 2012/01/03 7:00 p.m.•2 views

CVE-2011-5047

Cross-site scripting XSS vulnerability in statusrrdgraph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter...

6.3CVSS0.01086EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2012/01/03 12:00 a.m.•5 views

PT-2012-2027

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.0.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the style parameter in the status rrd graph.php...

4.3CVSS0.01086EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/01/03 12:00 a.m.•4 views

CVE-2011-5047: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in statusrrdgraph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter...

4.3CVSS6AI score0.01086EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/12/14 12:00 a.m.•52 views

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...

7.2CVSS1AI score0.01702EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•52 views

Mozilla Products Multiple Information Disclosure Vulnerabilities - (Windows)

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultinfodiscvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla Products Multiple Information Disclosure Vulnerabilities - Windows Authors:...

5CVSS9.6AI score0.01224EPSS
SaveExploits2References4
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•37 views

Mozilla Products Multiple Information Disclosure Vulnerabilities - MAC OS X

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultinfodiscvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Multiple Information Disclosure Vulnerabilities - MAC OS X...

5CVSS0.1AI score0.01224EPSS
SaveExploits2References4
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•41 views

Google Chrome Multiple Information Disclosure Vulnerabilities (Linux)

The host is installed with Google Chrome and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultinfodiscvulnlin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome Multiple Information Disclosure Vulnerabilities Linux Authors: Rachana...

5CVSS5.9AI score0.00828EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•40 views

Opera Multiple Information Disclosure Vulnerabilities (Mac OS X)

The host is installed with Opera and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultinfodiscvulnmacosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Multiple Information Disclosure Vulnerabilities Mac OS X Authors: Rachana Shetty Copyright:...

5CVSS6.4AI score0.0114EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•39 views

Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities

The host is installed with Internet Explorer and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbmsiemultinfodiscvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities Authors: Soora...

5CVSS6.4AI score0.13659EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•38 views

Google Chrome Multiple Information Disclosure Vulnerabilities (Windows)

The host is installed with Google Chrome and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultinfodiscvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Information Disclosure Vulnerabilities Windows Authors: Rachan...

5CVSS5.9AI score0.00828EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•31 views

Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities

Internet Explorer is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS5.1AI score0.13659EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2011/12/09 12:00 a.m.•63 views

Mozilla Products Multiple Information Disclosure Vulnerabilities - Mac OS X

Mozilla Firefox/Seamonkey/Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS9.6AI score0.01224EPSS
SaveExploits2References4
NVD
NVD
•added 2011/12/07 7:55 p.m.•34 views

CVE-2010-5069

The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...

4.3CVSS7.9AI score0.00821EPSS
SaveExploits1References2
Prion
Prion
•added 2011/12/07 7:55 p.m.•45 views

Design/Logic Flaw

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

4.3CVSS6AI score0.02597EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2011/12/07 7:55 p.m.•41 views

CVE-2010-5069

The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...

4.3CVSS5.9AI score0.00821EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2011/12/07 7:55 p.m.•29 views

CVE-2010-5074

The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets CSS token sequences, which makes it easier for remote attackers to obtain sensitive information...

4.3CVSS6AI score0.00644EPSS
SaveExploits0References1
Prion
Prion
•added 2011/12/07 7:55 p.m.•33 views

Design/Logic Flaw

The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...

4.3CVSS5.4AI score0.02597EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2011/12/07 7:55 p.m.•40 views

CVE-2002-2435

The Cascading Style Sheets CSS implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

4.3CVSS8.1AI score0.13659EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2011/12/07 7:00 p.m.•52 views

CVE-2002-2436

The Cascading Style Sheets CSS implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a...

8.1AI score0.0111EPSS
SaveExploits1References5
myhack58
myhack58
•added 2011/11/11 12:00 a.m.•26 views

ewebeditor(PHP) Ver 3.8 present an arbitrary file upload 0day-vulnerability warning-the black bar safety net

titleeWebeditoR3. 8 for php any file on the EXP/title form action=”" method=post enctype=”multipart/form-data” INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" URL:input type=text name=url value=”http://www.sitedirsec.com/ewebeditor/” size=1 0 0br INPUT TYPE=”hidden” name=”aStyle1 2”...

0.3AI score
SaveExploits0
Rows per page
Query Builder