Lucene search
+L

11 matches found

CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•21 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 137.0.2, which stems from a competing condition in nsHttpTransaction that could lead to memory corruption...

6.5CVSS6.3AI score0.00315EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/01/17 12:00 a.m.•13 views

Progress MOVEit Transfer Input Validation Error Vulnerability

Progress MOVEit Transfer is a secure hosted file transfer application from Progress. An input validation error vulnerability exists in Progress MOVEit Transfer, which stems from the presence of an input validation issue that allows an authenticated user to manipulate parameters in an HTTPS...

7.1CVSS6.6AI score0.00539EPSS
SaveExploits0References4
OSV
OSV
•added 2021/05/28 8:15 a.m.•13 views

CVE-2021-32541

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services...

5.3CVSS6.1AI score0.01511EPSS
SaveExploits0References2
NVD
NVD
•added 2021/05/28 8:15 a.m.•26 views

CVE-2021-32541

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services...

5.3CVSS0.01511EPSS
SaveExploits0References2
CVE
CVE
•added 2021/05/28 8:10 a.m.•58 views

CVE-2021-32541

CVE-2021-32541: A vulnerability in the CTS Web transaction system’s authentication and session management allows remote unauthenticated actors to flood with valid usernames and force logged-in users to log out, potentially denying access to services. The issue is tied to an incorrect implementati...

5.3CVSS5.5AI score0.01511EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/05/28 12:00 a.m.•15 views

嘉实资讯 CTS Web transaction system 授权问题漏洞

CTS Web transaction system is a CTS Web transaction system from Cascade Information Technology, Taiwan. The CTS Web transaction system suffers from an authorization issue vulnerability that stems from an incorrect implementation of the CTS Web transaction system related to authentication and...

5.3CVSS5.8AI score0.01511EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/28 12:00 a.m.•11 views

CVE-2021-32543: Improper Authentication

The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate cookies to access other accounts and trade in the stock market with spoofed identity...

6.5CVSS6AI score0.00761EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/28 12:00 a.m.•13 views

CTS Web transaction system 跨站脚本漏洞

The CTS Web transaction system is a CTS Web transaction system from Taiwan's Cascade Information Corporation. A cross-site scripting vulnerability exists in the CTS Web transaction system, which stems from the fact that the specific functional parameters of the transaction system do not filter...

6.1CVSS5.9AI score0.00681EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/05/28 12:00 a.m.•5 views

PT-2021-19766

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system affected versions not specified Description: The issue is related to incorrect implementation of authentication and session management in the CTS Web transaction system. This allows remote unauthenticated attackers ...

5.3CVSS0.01511EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/05/28 12:00 a.m.•17 views

嘉实资讯 CTS Web transaction system 授权问题漏洞

CTS Web transaction system is a CTS Web transaction system from Cascade Information Technology, Taiwan. An authorization issue vulnerability exists in the CTS Web transaction system, which stems from an incorrect implementation of authentication-related functionality in the transaction system. A...

6.5CVSS5.8AI score0.00761EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/05/28 12:00 a.m.•6 views

PT-2021-19768

Name of the Vulnerable Software and Affected Versions: CTS Web transaction system affected versions not specified Description: The issue is related to incorrect implementation of authentication management in the CTS Web transaction system. After a user logs in, remote attackers can manipulate...

6.5CVSS0.00761EPSS
SaveExploits0References5
Rows per page
Query Builder