Lucene search
+L

17432 matches found

Cvelist
Cvelist
added 2023/01/03 7:55 p.m.35 views

CVE-2022-43532

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script...

8CVSS7.2AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/01/03 6:37 p.m.10 views

CVE-2022-43519

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

8.8CVSS7.4AI score0.00952EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2023/01/03 9:49 a.m.311 views

Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this reposi...

8.8CVSS9.3AI score0.06663EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.14 views

PT-2023-14497 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.7AI score0.00897EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.11 views

PT-2023-14234 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.14 views

PT-2023-14229 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.8AI score0.00952EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.13 views

PT-2023-14233 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.13 views

PT-2023-14232 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.11 views

PT-2023-14496 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

7.2CVSS7.2AI score0.01125EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.17 views

PT-2023-14231 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.10 views

PT-2023-14236 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

6.1CVSS6.5AI score0.00462EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.12 views

PT-2023-14238 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

6.1CVSS6.5AI score0.00462EPSS
SaveExploits0References4
NVD
NVD
added 2023/01/02 8:15 p.m.38 views

CVE-2023-22452

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.5AI score0.00548EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/02 8:15 p.m.18 views

Input validation

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

4CVSS6.5AI score0.00548EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/01/02 7:17 p.m.37 views

CVE-2023-22452 Improper Input Validation in kenny2automate

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.7AI score0.00548EPSS
SaveExploits0References2
CVE
CVE
added 2023/01/02 7:17 p.m.108 views

CVE-2023-22452

CVE-2023-22452 affects the Discord bot kenny2automate . The vulnerability is in the web interface for server settings where input names embedded Discord channel IDs, with no validation to confirm the IDs belong to the target server before commit a947d7c. This enables an attacker who has access to...

6.5CVSS6.5AI score0.00548EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/01/02 7:17 p.m.25 views

CVE-2023-22452 Improper Input Validation in kenny2automate

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.5AI score
SaveExploits0References4
Debian
Debian
added 2022/12/31 9:27 a.m.134 views

[SECURITY] [DLA 3252-1] cacti security update

Debian LTS Advisory DLA-3252-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2022 https://wiki.debian.org/LTS Package : cacti Version : 1.2.2+ds1-2+deb10u5 CVE ID : CVE-2020-8813 CVE-2020-23226 CVE-2020-25706 CVE-2022-0730 CVE-2022-46169 Debian Bug :...

9.8CVSS7.5AI score0.99826EPSS
SaveExploits74
BDU FSTEC
BDU FSTEC
added 2022/12/30 12:00 a.m.11 views

The vulnerability in the web interface for controlling Siemens SCALANCE industrial switches allows a hacker to execute arbitrary code.

The vulnerability of the web interface for controlling Siemens SCALANCE industrial switches is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.01133EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2022/12/30 12:00 a.m.8 views

AdminServ 跨站脚本漏洞

AdminServ is a WebInterface used by Christopher F., an individual developer, to manage Trackmania Forever and ManiaPlanet dedicated servers. A cross-site scripting vulnerability exists in AdminServ, which stems from incorrect manipulation of the parameter text leading to cross-site scripting...

6.1CVSS4.2AI score0.00544EPSS
SaveExploits0References5
Rows per page
Query Builder