Lucene search
+L

8806 matches found

OSV
OSV
added 2019/03/06 8:29 p.m.4 views

CVE-2019-4030

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS6AI score0.00695EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/03/06 12:00 a.m.4 views

IBM WebSphere Application Server Cross-Site Scripting Vulnerability (CNVD-2019-06354)

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM WAS, which can b...

5.4CVSS6.4AI score0.00695EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/03/06 12:00 a.m.12 views

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2019-06355)

IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...

5.4CVSS6.3AI score0.0066EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/05 6:29 p.m.10 views

CVE-2019-4029

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force...

5.4CVSS5.7AI score0.00968EPSS
SaveExploits0References3
OSV
OSV
added 2019/03/05 6:29 p.m.12 views

CVE-2019-4028

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

5.4CVSS5.7AI score0.00968EPSS
SaveExploits0References3
OSV
OSV
added 2019/03/05 6:29 p.m.11 views

CVE-2019-4027

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceI...

5.4CVSS5.7AI score0.00968EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2019/03/05 12:00 a.m.10 views

PT-2019-16847 · Ibm · Ibm Sterling B2B Integrator

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 5.2.0.1 through 6.0.0.0 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

5.4CVSS5.7AI score0.00968EPSS
SaveExploits0References4
CNVD
CNVD
added 2019/03/04 12:00 a.m.15 views

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-06047)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

5.4CVSS6.5AI score0.00968EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2019/02/28 12:00 a.m.55 views

KLA12364 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in modsessioncookie can be exploited to spoof user interface. 2...

7.5CVSS7.3AI score0.59055EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2019/02/27 12:45 p.m.141 views

Ophcrack - A Windows Password Cracker Based On Rainbow Tables

Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms. Features: Runs on Windows, Linux/Unix, Mac OS X, ... Cracks LM...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2019/02/27 12:00 a.m.6 views

IBM Tivoli Storage Manager Operations Center Cross-Site Scripting Vulnerability (CNVD-2019-05656)

IBM Tivoli Storage Manager Operations Center is a next-generation simplified backup management solution from IBM USA. The product provides a centralized view of backup issues for multiple TSM servers and extended DB2 databases, among other features. A cross-site scripting vulnerability exists in...

6.5AI score
SaveExploits0References1
OSV
OSV
added 2019/02/26 5:29 p.m.7 views

CVE-2019-7392

An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration...

9.1CVSS7.3AI score0.01721EPSS
SaveExploits0References2
Prion
Prion
added 2019/02/21 8:29 p.m.21 views

Cross site scripting

A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability is due to...

4.3CVSS5.9AI score0.01211EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/02/21 8:29 p.m.29 views

CVE-2019-1685

A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability is due to...

6.1CVSS5.9AI score0.01211EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/02/21 8:00 p.m.29 views

CVE-2019-1685 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability

A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability is due to...

6.1CVSS5.9AI score0.01211EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/02/21 12:00 a.m.7 views

IBM Security Identity Governance Virtual Appliance Cross-Site Scripting Vulnerability

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A cross-site scripting vulnerability exists in IBM Security...

6.1CVSS6.4AI score0.00894EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/02/20 4:00 p.m.127 views

Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability

A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability is due to...

6.1CVSS1.3AI score0.01211EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2019/02/20 10:20 a.m.21 views

Security Bulletin: A vulnerability in IBM WebSphere Application Server affects IBM Spectrum Scale (CVE-2018-1901)

Summary There is a vulnerability in IBM WebSphere Application Server, used by IBM Spectrum Scale. This issue allow a remote attacker to temporarily gain elevated privileges on the system. Vulnerability Details IBM WebSphere Application Server is used to provide graphical user interface for managi...

8.8CVSS0.6AI score0.01504EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2019/02/20 4:29 a.m.10 views

CVE-2019-8948

PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163...

9.8CVSS7.3AI score0.03932EPSS
SaveExploits0References2
NVD
NVD
added 2019/02/20 4:29 a.m.18 views

CVE-2019-8948

PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163...

9.8CVSS9.7AI score0.03932EPSS
SaveExploits0References2
Rows per page
Query Builder