Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

17476 matches found

OSV
OSV•added 2023/01/04 6:15 p.m.•7 views

CVE-2022-22352

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.4AI score0.00365EPSS
SaveExploits0References2
CNNVD
CNNVD•added 2023/01/04 12:00 a.m.•10 views

coebot-www 跨站脚本漏洞

coebot-www is a web interface for CoeBot by Hayden Schiff, an individual developer. A cross-site scripting vulnerability exists in coebot-wwww, which stems from the functions displayChannelCommands/displayChannelQuotes/displayChannelAutoreplies/showChannelHighlights/showChannelBoi in the...

6.1CVSS4.2AI score0.00511EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/04 12:00 a.m.•12 views

PT-2023-13360 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

6.1CVSS6.2AI score0.00392EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2023/01/03 8:04 p.m.•40 views

CVE-2022-43537

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

7.2CVSS7.4AI score0.01437EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2023/01/03 7:55 p.m.•37 views

CVE-2022-43532

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script...

8CVSS7.2AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2023/01/03 6:37 p.m.•10 views

CVE-2022-43519

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

8.8CVSS7.4AI score0.00952EPSS
SaveExploits0References1
GithubExploit
GithubExploit•added 2023/01/03 9:49 a.m.•312 views

Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this reposi...

8.8CVSS9.3AI score0.06663EPSS
SaveExploits6
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•15 views

PT-2023-14497 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.7AI score0.00897EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•13 views

PT-2023-14234 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•16 views

PT-2023-14229 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.8AI score0.00952EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•14 views

PT-2023-14233 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•12 views

PT-2023-14496 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

7.2CVSS7.2AI score0.01125EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•11 views

PT-2023-14236 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

6.1CVSS6.5AI score0.00462EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•12 views

PT-2023-14238 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

6.1CVSS6.5AI score0.00462EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•14 views

PT-2023-14232 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2023/01/03 12:00 a.m.•18 views

PT-2023-14231 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...

8.8CVSS8.9AI score0.00952EPSS
SaveExploits0References3
NVD
NVD•added 2023/01/02 8:15 p.m.•40 views

CVE-2023-22452

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.5AI score0.00548EPSS
SaveExploits0References2
Prion
Prion•added 2023/01/02 8:15 p.m.•19 views

Input validation

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

4CVSS6.5AI score0.00548EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2023/01/02 7:17 p.m.•112 views

CVE-2023-22452

CVE-2023-22452 affects the Discord bot kenny2automate . The vulnerability is in the web interface for server settings where input names embedded Discord channel IDs, with no validation to confirm the IDs belong to the target server before commit a947d7c. This enables an attacker who has access to...

6.5CVSS6.5AI score0.00548EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2023/01/02 7:17 p.m.•39 views

CVE-2023-22452 Improper Input Validation in kenny2automate

kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of input names. Prior to commit a947d7c, no validation was performed to ensure that the channel IDs submitted actually belonged to the server being configured...

6.5CVSS6.7AI score0.00548EPSS
SaveExploits0References2
Rows per page
Query Builder