Lucene search
+L

9919 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/17 12:00 a.m.•7 views

CVE-2014-4270: Undefined Security Weakness

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface, a different vulnerability than CVE-2014-4269...

4CVSS6AI score0.01939EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/17 12:00 a.m.•7 views

CVE-2014-4269: Undefined Security Weakness

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface, a different vulnerability than CVE-2014-4270...

4CVSS6AI score0.01939EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2014/07/16 12:00 a.m.•10 views

PT-2014-5820

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions prior to 10.1-126.12 Description A cross-site scripting XSS issue exists in the administration user interface, allowing remote attackers to inject arbitrary we...

4.3CVSS0.01684EPSS
SaveExploits2References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/16 12:00 a.m.•13 views

CVE-2014-4346: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly Access Gateway Enterprise Edition 10.1 before 10.1-126.12 allows remote attackers to inject arbitrary web script or HTML via unspecified...

4.3CVSS5.9AI score0.01684EPSS
SaveExploits2References2
Prion
Prion
•added 2014/07/09 11:07 a.m.•29 views

Cross site scripting

Cross-site scripting XSS vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582...

4.3CVSS6.1AI score0.01951EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2014/07/09 12:00 a.m.•8 views

PT-2014-5208

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 and SPA500 phones affected versions not specified Description A cross-site scripting XSS issue exists in the web user interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.3CVSS0.01951EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/09 12:00 a.m.•9 views

CVE-2014-3313: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582...

4.3CVSS5.9AI score0.01951EPSS
SaveExploits0References2
Fedora
Fedora
•added 2014/07/03 4:07 a.m.•41 views

[SECURITY] Fedora 19 Update: libreoffice-4.1.6.2-7.fc19

LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...

10CVSS1.3AI score0.0389EPSS
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•44 views

Root Exploit Western Digital's WD TV Live SMP/Hub

No description provided by source. Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of it...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•45 views

ravennuke 2.3.0 - Multiple Vulnerabilities

No description provided by source. waraxe-2009-SA072 - Multiple Vulnerabilities in RavenNuke 2.3.0 =============================================================================== Author: Janek Vind waraxe Date: 16. February 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-72.html...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•58 views

Foswiki MAKETEXT Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

5CVSS0.3AI score0.35701EPSS
SaveExploits7
Tenable Nessus
Tenable Nessus
•added 2014/06/23 12:00 a.m.•23 views

Countertack Sentinel User Interface Detection

Binary data countertacksentinelwebuidetect.nbin...

7.3AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2014/06/16 7:51 a.m.•16 views

Internet Explorer Developer Channel - Early Access to Next-Generation Features For Developers

In an effort to create more open and accessible atmosphere between the Internet Explorer team and the Web development community, Microsoft today announced the launch of The Developer Channel for Internet Explorer. Internet Explorer Developer Channel is a fully-functioning browser designed to...

6.5AI score
SaveExploits0
securityvulns
securityvulns
•added 2014/06/09 12:00 a.m.•84 views

[SECURITY] [DSA 2939-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2939-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 31, 2014 http://www.debian.org/security/faq -...

7.5CVSS0.8AI score0.0197EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2014/06/02 12:00 a.m.•52 views

Debian DSA-2939-1 : chromium-browser - security update

Several vulnerabilities were discovered in the chromium web browser. - CVE-2014-1743 cloudfuzzer discovered a use-after-free issue in the Blink/Webkit document object model implementation. - CVE-2014-1744 Aaron Staple discovered an integer overflow issue in audio input handling. - CVE-2014-1745...

7.5CVSS7.5AI score0.0197EPSS
SaveExploits0References18
OpenVAS
OpenVAS
•added 2014/05/31 12:00 a.m.•50 views

Debian Security Advisory DSA 2939-1 (chromium-browser - security update)

Several vulnerabilities were discovered in the chromium web browser. CVE-2014-1743 cloudfuzzer discovered a use-after-free issue in the Blink/Webkit document object model implementation. CVE-2014-1744 Aaron Staple discovered an integer overflow issue in audio input handling. CVE-2014-1745 Atte...

7.5CVSS0.6AI score0.0197EPSS
SaveExploits0References1
osv_dsa
osv_dsa
•added 2014/05/31 12:00 a.m.•44 views

DSA-2939-1 chromium-browser - security update

Bulletin has no description...

7.5CVSS8.4AI score0.0197EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2014/05/30 12:00 a.m.•56 views

Debian: Security Advisory (DSA-2939-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.7AI score0.0197EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2014/05/26 12:00 a.m.•7 views

PT-2014-3170

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments TSMVE versions 6.3 through 7.1.0.2 Description The issue concerns the Data Protection for VMware component, which fails to properly check authorization for certain operations. This allows loc...

4.1CVSS0.00262EPSS
SaveExploits0References3
ThreatPost
ThreatPost
•added 2014/05/21 3:33 p.m.•14 views

Better Security, 'Progressive Encryption' in Silent Text 2.0

Silent Circle has released a new version of its private text messaging and secure file transfer service for Android and iOS mobile devices. Silent Text 2.0 includes a number of security and user-interface upgrades. The company claims this version eliminates a keying delay issue that existed in...

0.6AI score
SaveExploits0References2
Rows per page
Query Builder