CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2019/12/27 9:15 p.m.•18 views

CVE-2014-6420

Cross-site scripting XSS vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded picture...

6.1CVSS6AI score0.01765EPSS

SaveExploits1References2

Prion•added 2019/12/27 9:15 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded picture...

4.3CVSS6.1AI score0.01765EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2019/12/27 8:43 p.m.•30 views

CVE-2014-6420

Cross-site scripting XSS vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded picture...

6AI score0.01765EPSS

SaveExploits1References2

Positive Technologies•added 2019/12/27 12:00 a.m.•5 views

PT-2019-7136

Name of the Vulnerable Software and Affected Versions Livefyre LiveComments version 3.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded picture. This could potentially lead to unauthorized actions on the...

6.1CVSS0.01765EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2019/12/27 12:00 a.m.•5 views

CVE-2014-6420: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded picture...

6.1CVSS6.4AI score0.01765EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by