Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•7 views

CVE-2024-45066: Improper Neutralization of Special Elements used in a Command

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands...

10CVSS6.2AI score0.00788EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•5 views

CVE-2024-43693: Improper Neutralization of Special Elements used in a Command

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands...

10CVSS6.2AI score0.00788EPSS
SaveExploits0References1
Mend
Mend
•added 2018/08/20 7:00 p.m.•6 views

CVE-2018-1000642

FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...

6.1CVSS0.00864EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/20 12:00 a.m.•12 views

CVE-2018-1000642: Improper Neutralization of Input During Web Page Generation

FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...

6.1CVSS6.3AI score0.00864EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/08/20 12:00 a.m.•5 views

PT-2018-9495

Name of the Vulnerable Software and Affected Versions FlightAirMap versions =v1.0-beta.21 Description The issue concerns a Cross Site Scripting XSS vulnerability in the GET variable used within the registration sub-menu page. This can lead to unauthorized actions, access to data, and the theft of...

6.1CVSS0.00864EPSS
SaveExploits0References4
OSV
OSV
•added 2017/03/02 6:59 a.m.•16 views

CVE-2017-6397

An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several -sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

6.1CVSS6AI score0.00838EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2011/09/08 6:00 p.m.•33 views

CVE-2011-3391

IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu...

6.1AI score0.01152EPSS
SaveExploits0References6
Rows per page
Query Builder