Lucene search
+L

247 matches found

Cvelist
Cvelist
•added 2017/02/01 8:00 p.m.•47 views

CVE-2016-6113

IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

5.9AI score0.00961EPSS
SaveExploits0References3
CVE
CVE
•added 2017/02/01 8:00 p.m.•73 views

CVE-2016-6113

CVE-2016-6113 concerns IBM Verse web UI, where a cross-site scripting vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. The description and related references confirm XSS impact; however, the provided documen...

6.1CVSS5.9AI score0.00961EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/01 12:00 a.m.•12 views

CVE-2016-6113: Improper Neutralization of Input During Web Page Generation

IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.1CVSS7.1AI score0.00961EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/02/01 12:00 a.m.•6 views

PT-2017-8904

Name of the Vulnerable Software and Affected Versions IBM Verse affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

6.1CVSS0.00961EPSS
SaveExploits0References5
hackapp
hackapp
•added 2016/04/01 8:51 a.m.•30 views

IBM Verse - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application IBM Verse published at the 'play' market has multiple vulnerabilities...

0.9AI score
SaveExploits0References1Affected Software1
Metasploit
Metasploit
•added 2014/11/25 12:00 a.m.•48 views

Arris VAP2500 tools_command.php Command Execution

Arris VAP2500 access points are vulnerable to OS command injection in the web management portal via the toolscommand.php page. Though authentication is required to access this page, it is trivially bypassed by setting the value of a cookie to an md5 hash of a valid username. Module Options msf us...

5.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/09/18 12:00 a.m.•38 views

Network Management/Inventory System - 'header.php' Remote File Inclusion

Network Management/Inventory System header.php Remote File Include Vulnerability ---------------------------------------------------------------------------------- @======================================================================================================@ + Author : EA Ngel + +...

7.5CVSS5.8AI score0.06118EPSS
SaveExploits1
Rows per page
Query Builder