Lucene search
+L

31 matches found

CNVD
CNVD
added 2021/05/10 12:00 a.m.8 views

Emissary Cross-Site Scripting Vulnerability

Emissary is a software application. A P2P-based data-driven workflow engine that runs on heterogeneous and potentially widely distributed multi-tier P2P network computing resources. A cross-site scripting vulnerability exists in Emissary version 5.9.0, which can be exploited by an attacker to...

6.1CVSS5.9AI score0.00955EPSS
SaveExploits1References1
NVD
NVD
added 2021/05/07 5:15 a.m.24 views

CVE-2021-32092

A Cross-site scripting XSS vulnerability in the DocumentAction component of U.S. National Security Agency NSA Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter...

6.1CVSS0.00955EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/07 5:15 a.m.13 views

CVE-2021-32092

A Cross-site scripting XSS vulnerability in the DocumentAction component of U.S. National Security Agency NSA Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter...

6.1CVSS5.8AI score
SaveExploits0References2
CVE
CVE
added 2021/05/07 3:52 a.m.54 views

CVE-2021-32092

The CVE-2021-32092 issue affects NSA Emissary 5.9.0, specifically the DocumentAction component. A Cross-site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via the uuid parameter. The available connected documents confirm the vulnerable version and parameter, ...

6.1CVSS6AI score0.00955EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2019/11/29 12:00 a.m.5 views

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43411)

FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/dialplans/dialplans.php in FusionPBX 4.4.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the appuuid...

6.1CVSS6AI score0.00866EPSS
SaveExploits1References1
zdt
zdt
added 2019/11/20 12:00 a.m.252 views

Bludit - Directory Traversal Image File Upload Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Bludit Directory Traversal Image File Upload Vulnerability", 'Description' = %q This module exploits a vulnerability in Bludit. A remote user cou...

8.8CVSS8.7AI score0.77962EPSS
SaveExploits16
NVD
NVD
added 2019/11/12 11:15 p.m.27 views

CVE-2010-3857

JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter...

6.1CVSS6.1AI score0.00855EPSS
SaveExploits0References3
Prion
Prion
added 2019/11/12 11:15 p.m.23 views

Cross site scripting

JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter...

4.3CVSS6.3AI score0.00855EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/11/12 10:03 p.m.79 views

CVE-2010-3857

JBoss BRMS before 5.1.0 has an XSS vulnerability via the asset=UUID parameter. The issue stems from a lack of proper validation of client-side data by the web application, enabling an attacker to execute client-side code. Affected product: Red Hat JBoss BRMS prior to 5.1.0. Impact is XSS; CVSS sc...

6.1CVSS6AI score0.00855EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2018/10/25 12:58 a.m.25 views

SQL Injection

mysql-binuuid-rails is vulnerable to SQL injection. The vulnerability exists due to the lack of sanitization of user input data, allowing the arbitrary SQL commands to be injected via the UUID parameter...

9.8CVSS9.8AI score0.01789EPSS
SaveExploits1References3Affected Software1
exploitpack
exploitpack
added 2018/10/25 12:00 a.m.24 views

MPS Box 0.1.8.0 - uuid SQL Injection

MPS Box 0.1.8.0 - uuid SQL Injection Exploit Title: MPS Box 0.1.8.0 - 'uuid' SQL Injection Dork: N/A Date: 2018-10-25 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mpsbox.com/ Software Link: https://sourceforge.net/projects/mpsbox/files/latest/download Version: 0.1.8.0 Category: Webapp...

0.3AI score
SaveExploits0
Rows per page
Query Builder