Lucene search
+L

9919 matches found

Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•10 views

PT-2020-4606

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a spoofing vulnerability in the Windows operating system, which is associated with errors in the representation of information by the user interface. This vulnerabilit...

5.5CVSS6.1AI score0.19124EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•28 views

PT-2020-4827 · Microsoft · Azure Devops Server +1

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server and Team Foundation Services affected versions not specified Description: The issue is related to a spoofing vulnerability in the Team Foundation Services component of Azure DevOps Server, where the user interface can be...

7.5CVSS5.1AI score0.01634EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•9 views

PT-2020-6374

Name of the Vulnerable Software and Affected Versions Easergy T300 versions 2.7 and older Description The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform arbitrary actions. This is due to improper...

6.5CVSS0.01088EPSS
SaveExploits0References8
Kaspersky
Kaspersky
•added 2020/11/10 12:00 a.m.•54 views

KLA12001 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

8.8CVSS8.8AI score0.01725EPSS
SaveExploits7References17
Kaspersky
Kaspersky
•added 2020/11/10 12:00 a.m.•74 views

KLA12003 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions. Below is a...

10CVSS8AI score0.27101EPSS
SaveExploits3References59
Kaspersky
Kaspersky
•added 2020/11/10 12:00 a.m.•68 views

KLA12014 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Data validation vulnerability in installer component can be exploited to...

9.6CVSS9.8AI score0.48293EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
•added 2020/11/10 12:00 a.m.•17 views

Oracle Trade Management UI Unauthorized Access Data Modification

The vulnerability of the User Interface component of the Oracle Trade Management application, part of the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or to...

8.5CVSS7.7AI score0.01256EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
•added 2020/11/09 9:28 a.m.•10 views

chromium-browser: Use after free in user interface

Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.0152EPSS
SaveExploits0References5
Citrix
Citrix
•added 2020/11/09 12:00 a.m.•129 views

Citrix Optimizer Tool

Citrix Optimizer Tool - v3.5.0.1 Created Date: Jun 21, 2017 Updated Date: Mar 12, 2025 SHA 256 Checksum: D8DCBF77BAE73E2EB4F8F6DCF408AFE90714230A15D3EB7390933D8DFB339044 To help us improve the Citrix Optimizer Tool, please send your feedback to https://forms.gle/TwWrKPT6J8u7GdKA6. Please note: Yo...

6.8AI score
SaveExploits0
Citrix
Citrix
•added 2020/11/09 12:00 a.m.•18 views

MessageHistory

MessageHistory Version 3.0 Created Date: 08/20/2006 Updated Date: 09/25/2013 Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools Description Sometimes Citrix Technical Support needs to...

7.2AI score
SaveExploits0
Citrix
Citrix
•added 2020/11/09 12:00 a.m.•22 views

Citrix StoreFront Web GUI Assistant

StoreFront Web GUI DevlopedDate: 09/12/2013 Modified Date: 04/16/2020 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download locatio...

7.2AI score
SaveExploits0
NVD
NVD
•added 2020/11/06 7:15 p.m.•40 views

CVE-2020-3591

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not...

4.3CVSS4.6AI score0.00723EPSS
SaveExploits0References1
NVD
NVD
•added 2020/11/06 7:15 p.m.•38 views

CVE-2020-26083

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based...

4.8CVSS4.9AI score0.00617EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/11/06 12:00 a.m.•43 views

openSUSE Security Update : chromium (openSUSE-2020-1831)

This update for chromium fixes the following issues : - Update to 86.0.4240.183 boo1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data...

9.6CVSS8.7AI score0.48293EPSS
SaveExploits3References8
osv_opensuse
osv_opensuse
•added 2020/11/05 1:12 p.m.•16 views

OPENSUSE-SU-2020:1831-1 Security update for chromium

This update for chromium fixes the following issues: - Update to 86.0.4240.183 boo1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data...

9.6CVSS9.5AI score0.48293EPSS
SaveExploits3References9
osv_opensuse
osv_opensuse
•added 2020/11/05 8:42 a.m.•13 views

OPENSUSE-SU-2020:1829-1 Security update for chromium, gn

This update for chromium, gn fixes the following issues: chromium was updated to 86.0.4240.183 boo1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007:...

9.6CVSS7.2AI score0.63894EPSS
SaveExploits12References43
Positive Technologies
Positive Technologies
•added 2020/11/05 12:00 a.m.•2 views

PT-2020-18838

Name of the Vulnerable Software and Affected Versions BIG-IP versions 14.1.0 through 14.1.2.3 BIG-IP versions 15.1.0 through 15.1.0.5 BIG-IP versions 16.0.0 through 16.0.0.1 Description A stored cross-site scripting XSS issue exists in an undisclosed page of the BIG-IP Traffic Management User...

5.4CVSS0.00521EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/11/05 12:00 a.m.•24 views

Cisco Integrated Management Controller Command Injection Vulnerability (CNVD-2020-70859)

The Cisco Integrated Management Controller IMC is a baseboard management controller that provides embedded server management for Cisco UCS C-Series rackmount servers and Cisco S-Series storage servers. A command injection vulnerability exists in the web UI of Cisco Integrated Management Controlle...

9CVSS8.1AI score0.01868EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/05 12:00 a.m.•6 views

CVE-2020-5940: Improper Neutralization of Input During Web Page Generation

In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the BIG-IP Configuration utility...

5.4CVSS5.6AI score0.00521EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/11/05 12:00 a.m.•16 views

Oracle Trade Management UI Data Modification

The vulnerability of the User Interface component of the Oracle Trade Management application, a part of the Oracle E-Business Suite, relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to modify, add, or delete data using the HTTP network protoc...

9.1CVSS7.5AI score0.02831EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder