Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/04/07 5:6 p.m.1 views

CVE-2026-34951

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains a reflected cross-site scripting vulnerability via the footerScripts parameter, which does not sanitize user-supplied input...

6.1CVSS5.8AI score0.00035EPSS
Exploits0References1
NVD
NVD
added 2026/04/06 8:16 p.m.1 views

CVE-2026-35178

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an...

9.8CVSS0.00333EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/06 7:1 p.m.0 views

CVE-2026-35178

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an...

9.3CVSS6.5AI score0.00333EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/04/06 3:58 p.m.1 views

EUVD-2026-19357

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains a reflected cross-site scripting vulnerability via the footerScripts parameter, which does not sanitize user-supplied input...

5.1CVSS5.8AI score0.00035EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30712

Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an...

9.3CVSS6.5AI score0.00333EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.13 views

CVE-2019-16068

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious managefiles.cgi request. This can be triggered via XSS or an IFRAME tag included within the site...

8.8CVSS6AI score0.00457EPSS
Exploits5References1
OSV
OSV
added 2020/03/20 12:17 a.m.1 views

CVE-2019-16071

Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is possible for a low-privileged user to perform all actions as an administrator by bypassing...

8.8CVSS5.8AI score0.00107EPSS
Exploits1References1
CNVD
CNVD
added 2020/03/20 12:0 a.m.2 views

NETSAS Enigma NMS Directory Traversal Vulnerability

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A path traversal vulnerability exists in NETSAS Enigma NMS version 65.0.0 and earlier. The vulnerability stems from the failure of a network system or product to properly filter special elements in the...

9.6CVSS6.8AI score0.01025EPSS
Exploits1References1
CNVD
CNVD
added 2020/03/20 12:0 a.m.4 views

Enigma NMS Privilege Control Bypass Vulnerability

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A security vulnerability exists in NETSAS Enigma NMS version 65.0.0 and earlier. An attacker can exploit this vulnerability to bypass authorization controls and perform operations as an administrator...

8.8CVSS6.9AI score0.00107EPSS
Exploits1
NVD
NVD
added 2020/03/19 11:15 p.m.12 views

CVE-2019-16068

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious managefiles.cgi request. This can be triggered via XSS or an IFRAME tag included within the site...

8.8CVSS8.3AI score0.00457EPSS
Exploits5References1
Prion
Prion
added 2020/03/19 11:15 p.m.8 views

Cross site request forgery (csrf)

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious managefiles.cgi request. This can be triggered via XSS or an IFRAME tag included within the site...

6.8CVSS8.2AI score0.00457EPSS
Exploits5References1Affected Software1
0day.today
0day.today
added 2019/09/09 12:0 a.m.53 views

Enigma NMS 65.0.0 - OS Command Injection Exploit

Exploit for multiple platform in category web applications !/usr/bin/python -------------------------------------------------------------------- Exploit Title: Enigma NMS OS Command Injection NETSAS Pty Ltd Enigma NMS Author: Mark Cross @xerubus | mogozobo.com Vendor: NETSAS Pty Ltd Vendor...

7.1AI score0.89311EPSS
Exploits5
Rows per page
Query Builder