Lucene search
+L

8779 matches found

CNNVD
CNNVD
added 2021/06/03 12:0 a.m.10 views

华为智能手机信息泄露漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to an information disclosure vulnerability that could be exploited by attackers to cause interception of video streams during transmission...

5.3CVSS5.9AI score0.00417EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.10 views

华为智能手机访问控制错误漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to a logic bypass vulnerability that could be exploited by attackers to compromise the data security and functional availability of the device...

6.8CVSS5.9AI score0.00185EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.9 views

Huawei EMUI/Magic UI 安全漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to business logic errors, which can be exploited by attackers to cause personal information leakage...

3.3CVSS5.8AI score0.00173EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.8 views

华为手机输入验证错误漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in certain Huawei phones that stems from improper array index validation. An attacker can exploit this vulnerability to cause code execution to gain system privileges. The following products and versions...

10CVSS8.9AI score0.00917EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/02 9:15 p.m.5 views

CVE-2020-5030

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.9AI score0.00495EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/02 9:15 p.m.11 views

CVE-2021-29668

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.9AI score0.00495EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/02 9:15 p.m.4 views

CVE-2021-20338

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS6.9AI score0.00495EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/02 9:15 p.m.6 views

CVE-2020-4977

IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS6AI score0.00495EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/06/02 12:0 a.m.42 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS6.6AI score0.0076EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.11 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

6.4CVSS5.5AI score0.0124EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/01 2:15 p.m.7 views

CVE-2019-4653

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170964...

5.4CVSS5.9AI score0.00761EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/01 2:15 p.m.8 views

CVE-2020-4354

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178506...

5.4CVSS5.9AI score0.0096EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.9 views

IBM Engineering Lifecycle Optimization 跨站脚本漏洞

IBM Engineering Lifecycle Optimization - Engineering Insights is a collaborative Web-based application that unlocks engineering data from a variety of lifecycle management applications to give you the information you need to make the best engineering decisions. A cross-site scripting vulnerabilit...

5.4CVSS5.6AI score0.00495EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.9 views

IBM Engineering Lifecycle Optimization 跨站脚本漏洞

IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from IBM America. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure that the entire organization...

5.4CVSS5.6AI score0.00495EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.8 views

IBM Engineering Lifecycle Optimization 跨站脚本漏洞

IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from IBM America. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure that the entire organization...

5.4CVSS5.5AI score0.00495EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/06/01 12:0 a.m.4 views

CVE-2020-5030

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.8AI score0.00495EPSS
SaveExploits0References3Affected Software7
OSV
OSV
added 2021/05/29 2:15 p.m.7 views

CVE-2021-30461

A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...

9.8CVSS7.8AI score0.36632EPSS
SaveExploits5References1
ATTACKERKB
ATTACKERKB
added 2021/05/29 2:15 p.m.6 views

CVE-2021-30461

A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...

9.8CVSS7.4AI score0.36632EPSS
SaveExploits5References3
Positive Technologies
Positive Technologies
added 2021/05/29 12:0 a.m.4 views

PT-2021-8118 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 113.0.5672.63 Description: The issue is related to an inappropriate implementation in the Navigation component of Google Chrome, which can be exploited by a remote attacker to perform domain spoofing via a...

8.8CVSS6.1AI score0.00968EPSS
SaveExploits1References38
CNNVD
CNNVD
added 2021/05/28 12:0 a.m.9 views

IBM Cognos Analytics 跨站脚本漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A cross-site scripting...

5.4CVSS8.6AI score0.00761EPSS
SaveExploits0References4
Rows per page
Query Builder