Lucene search
+L

8811 matches found

ATTACKERKB
ATTACKERKB
added 2021/07/12 12:00 a.m.6 views

CVE-2021-20368

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195357...

5.4CVSS6AI score0.00495EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/12 12:00 a.m.6 views

CVE-2021-20365

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195036...

5.4CVSS5.5AI score0.00498EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/07/12 12:00 a.m.10 views

IBM Cloud Pak for Applications跨站脚本漏洞

IBM Cloud Pak for Applications is an application from IBM America, Inc. Provides cloud-native development solutions that deliver value quickly. A cross-site scripting vulnerability exists in IBM Cloud Pak for Applications v4.3, which allows a user to embed arbitrary JavaScript code in the Web UI ...

5.4CVSS5.5AI score0.00495EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/07/12 12:00 a.m.6 views

CVE-2021-20366

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195037...

5.4CVSS5.5AI score0.00495EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/07/09 5:15 p.m.9 views

CVE-2021-29712

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 200966...

6.1CVSS6AI score0.00653EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/09 12:00 a.m.4 views

CVE-2021-29804

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20426...

6.4CVSS5.9AI score0.00495EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/07/09 12:00 a.m.12 views

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站脚本漏洞

IBM Tivoli Netcool/OMNIbus is a service-level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is a web-based application version of the system that displays event data from multiple data sources in a variety of graphical formats in...

6.4CVSS5.6AI score0.00495EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/08 12:00 a.m.9 views

IBM InfoSphere Information Server 跨站脚本漏洞

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Analyzer that allows a user to...

6.1CVSS5.7AI score0.00653EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:00 a.m.21 views

The vulnerability of the fly-qdm GUI input software, related to a code error, allows a intruder to access confidential data.

The vulnerability of the fly-qdm GUI login software lies in the absence of a warning when an outdated password is used during password changes. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

4CVSS5.5AI score
SaveExploits0References1
OSV
OSV
added 2021/07/01 4:15 p.m.12 views

CVE-2020-4935

IBM Datacap Fastdoc Capture IBM Datacap Navigator 9.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.4AI score0.00495EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/07/01 12:00 a.m.56 views

Huawei Emui and Magic UI processing logic error vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a processing logic error, which stems from a configuration flaw in the device. An attacker could exploit the vulnerability to hijac...

6.8CVSS2.4AI score0.00462EPSS
SaveExploits0Affected Software2
CNNVD
CNNVD
added 2021/07/01 12:00 a.m.11 views

Huawei Smartphone 访问控制错误漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to a DoS vulnerability, which can be exploited by attackers to cause a temporary denial of service...

5.3CVSS5.8AI score0.00666EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/30 12:00 a.m.5 views

CVE-2020-4935

IBM Datacap Fastdoc Capture IBM Datacap Navigator 9.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5AI score0.00495EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/06/30 12:00 a.m.11 views

华为智能手机缓冲区错误漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A buffer error vulnerability exists in multiple Huawei smartphones, which stems from a memory buffer being restricted for improper operation. The vulnerability can be exploited by an attacker to cause code execution. The following...

9.8CVSS8.8AI score0.00765EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/29 4:15 p.m.6 views

CVE-2021-20477

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949...

5.4CVSS5.7AI score0.00502EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/28 8:15 p.m.10 views

CVE-2020-21142

Cross Site Scripting XSS vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi...

6.1CVSS5.8AI score0.00685EPSS
SaveExploits1References1
OSV
OSV
added 2021/06/28 4:15 p.m.7 views

CVE-2021-29775

IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

5.4CVSS5.4AI score0.00876EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/06/28 12:00 a.m.8 views

IBM Planning Analytics 跨站脚本漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Local, which stems from a...

5.4CVSS5.7AI score0.00502EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/06/28 12:00 a.m.8 views

IPFire 跨站脚本漏洞

IPFire is a hardened, versatile Linux-based open source firewall. A cross-site scripting vulnerability exists in IPFire version 2.23. The vulnerability can be exploited by an attacker to conduct cross-site scripting attacks via the IPfire web UI in mail.cgi...

6.1CVSS5.2AI score0.00685EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/06/28 12:00 a.m.7 views

CVE-2021-20477

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949...

5.4CVSS5.5AI score0.00502EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder