Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-4562

Malware in sbrugna...

6.8CVSS6.4AI score0.00138EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-4565

Malware in sbrugna...

5CVSS6.4AI score0.00347EPSS
Exploits0References5
NVD
NVD
added 2024/01/24 5:15 p.m.7 views

CVE-2024-23641

SvelteKit is a web development kit. In SvelteKit 2, sending a GET request with a body eg to a built and previewed/hosted sveltekit app throws Request with GET/HEAD method cannot have body. and crashes the preview/hosting. After this happens, one must manually restart the app. TRACE requests will...

7.5CVSS7.5AI score0.00263EPSS
Exploits1References2
NVD
NVD
added 2015/01/07 2:59 a.m.12 views

CVE-2014-4639

EMC Documentum Web Development Kit WDK before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value...

5CVSS6.6AI score0.00347EPSS
Exploits0References4
NVD
NVD
added 2015/01/07 2:59 a.m.10 views

CVE-2014-4637

Open redirect vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

6.4CVSS6.7AI score0.00253EPSS
Exploits0References3
NVD
NVD
added 2015/01/07 2:59 a.m.11 views

CVE-2014-4638

EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors...

5CVSS6.3AI score0.0026EPSS
Exploits0References3
NVD
NVD
added 2015/01/07 2:59 a.m.10 views

CVE-2014-4636

Cross-site request forgery CSRF vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations...

6.8CVSS7.2AI score0.00138EPSS
Exploits0References3
NVD
NVD
added 2015/01/07 2:59 a.m.11 views

CVE-2014-4635

Multiple cross-site scripting XSS vulnerabilities in EMC Documentum Web Development Kit WDK before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.00254EPSS
Exploits0References3
Prion
Prion
added 2015/01/07 2:59 a.m.12 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC Documentum Web Development Kit WDK before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00254EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2015/01/07 2:59 a.m.13 views

Design/Logic Flaw

EMC Documentum Web Development Kit WDK before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value...

5CVSS7.1AI score0.00347EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2015/01/07 2:59 a.m.10 views

Open redirect

Open redirect vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

6.4CVSS7.2AI score0.00253EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2015/01/07 2:0 a.m.42 views

CVE-2014-4639

CVE-2014-4639 affects EMC Documentum Web Development Kit (WDK) before 6.8. The issue is insufficient randomness in a Webtop component parameter, enabling remote attackers to predict the parameter and carry out phishing via brute-force attempts. The ESA-2014-180 advisory lists this under multiple ...

5CVSS6.8AI score0.00347EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2015/01/07 2:0 a.m.15 views

CVE-2014-4638

EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors...

6.3AI score0.0026EPSS
Exploits0References3
CNVD
CNVD
added 2015/01/07 12:0 a.m.2 views

Multiple Cross-Site Scripting Vulnerabilities in EMC Documentum Web Development Kit (WDK)

The EMC Documentum Web Development Kit WDK is a Web development kit. The EMC Documentum Web Development Kit WDK contains multiple cross-site scripting vulnerabilities that could be exploited by an attacker to execute arbitrary script code in a browser without the user's knowledge in an affected...

4.3CVSS6.8AI score0.00254EPSS
Exploits0References1
CNVD
CNVD
added 2015/01/07 12:0 a.m.0 views

Unspecified Framework Injection Vulnerability in EMC Documentum Web Development Kit (WDK)

The EMC Documentum Web Development Kit WDK is a Web development kit. An unspecified frame injection vulnerability exists in EMC Documentum Web Development Kit WDK, which can be exploited by attackers to conduct phishing attacks...

5CVSS7.3AI score0.0026EPSS
Exploits0References1
CNVD
CNVD
added 2015/01/07 12:0 a.m.2 views

EMC Documentum Web Development Kit (WDK) URL Redirection Vulnerability

The EMC Documentum Web Development Kit WDK is a Web development kit. The EMC Documentum Web Development Kit WDK contains a URL redirection vulnerability that can be exploited by an attacker to construct URLs that contain malicious Web sites, which may be redirected to an attacker-controlled Web...

6.4CVSS6.8AI score0.00253EPSS
Exploits0References1
securityvulns
securityvulns
added 2001/03/29 12:0 a.m.35 views

CHINANSL Security Advisory(CSA-200106)

Topic: JavaServer Web Dev KitJSWDK1.0.1 for win2000 Directory traversal Vulnerability vulnerable: Microsoft Win2000 ЎЎЎЎ+JSWDK1.0.1 maybe for other operating system also. discussion: A security vulnerability has been found in Windows NT/2000 systems that have JSWDK 1.0.1 installed.The vulnerabili...

0.9AI score
Exploits0
Rows per page
Query Builder