Lucene search
K

10 matches found

CVE
CVE
added 2026/04/21 8:35 p.m.6 views

CVE-2026-34274

A vulnerability (CVE-2026-34274) affects Oracle Configurator in Oracle E-Business Suite, specifically the UI component, for versions 12.2.3–12.2.15. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Configurator, with user interaction required. The im...

6.1CVSS5.8AI score0.0003EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/09/30 2:15 a.m.1 views

CVE-2023-43702

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score0.00117EPSS
Exploits1References2
Prion
Prion
added 2023/09/30 2:15 a.m.13 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00117EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/30 1:45 a.m.14 views

CVE-2023-43702 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score0.00117EPSS
Exploits1References2
OSV
OSV
added 2022/05/16 3:15 p.m.1 views

CVE-2022-1436

The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargotrackingnumber parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks...

6.1CVSS6.4AI score0.0021EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/16 3:15 p.m.3 views

CVE-2022-1436

The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargotrackingnumber parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks...

6.1CVSS6.3AI score0.0021EPSS
Exploits1References2
Cisco Threats
Cisco Threats
added 2017/05/15 8:1 p.m.25 views

Threat Outbreak Alert RuleID29121: Email Messages Distributing Malicious Software on May 15, 2017

Medium Alert ID: 53831 First Published: 2017 May 15 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29121 may contain the following files: Name | Size...

0.4AI score
Exploits0
Cisco Threats
Cisco Threats
added 2015/09/25 3:56 p.m.10 views

Threat Outbreak Alert RuleID18269: Email Messages Distributing Malicious Software on September 25, 2015

Medium Alert ID: 41219 First Published: 2015 September 25 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18269 may contain the following files: Name ...

0.3AI score
Exploits0
Cisco Threats
Cisco Threats
added 2015/04/28 1:47 p.m.10 views

Threat Outbreak Alert RuleID14948: Email Messages Distributing Malicious Software on April 28, 2015

Medium Alert ID: 38554 First Published: 2015 April 28 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14948 may contain the following files: Name | Si...

0.3AI score
Exploits0
securityvulns
securityvulns
added 2009/12/04 12:0 a.m.35 views

U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...

0.5AI score
Exploits0
Rows per page
Query Builder