Lucene search
+L

6551 matches found

NVD
NVD
•added 2022/07/08 5:15 p.m.•32 views

CVE-2022-34167

IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS0.00659EPSS
SaveExploits0References3
Prion
Prion
•added 2022/07/08 5:15 p.m.•28 views

Cross site scripting

IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229430...

3.5CVSS5.2AI score0.00659EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2022/07/08 5:15 p.m.•30 views

Cross site scripting

IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

3.5CVSS5.2AI score0.00659EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/07/08 5:00 p.m.•45 views

CVE-2022-34166

IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229430...

5.4CVSS5.3AI score0.00659EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/07/08 12:00 a.m.•1 views

PT-2022-15397

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0.0.0 through 10.0.3.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

5.4CVSS0.00461EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/08 12:00 a.m.•1 views

CVE-2022-34167: Improper Neutralization of Input During Web Page Generation

IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.8AI score0.00659EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/08 12:00 a.m.•1 views

PT-2022-22035

Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard and Advanced version 11.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

5.4CVSS0.00659EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/07/08 12:00 a.m.•1 views

PT-2022-22036

Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard and Advanced version 11.1 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

5.4CVSS0.00659EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/08 12:00 a.m.•4 views

CVE-2022-22370: Improper Neutralization of Input During Web Page Generation

IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.8AI score0.00461EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/08 12:00 a.m.•4 views

CVE-2022-34166: Improper Neutralization of Input During Web Page Generation

IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229430...

5.4CVSS5.8AI score0.00659EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/07 9:15 p.m.•48 views

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.8CVSS0.02566EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/07/07 9:15 p.m.•13 views

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.8CVSS7AI score0.02566EPSS
SaveExploits1References6
OSV
OSV
•added 2022/07/07 9:15 p.m.•14 views

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.8CVSS5.7AI score0.02566EPSS
SaveExploits1References5
Prion
Prion
•added 2022/07/07 9:15 p.m.•62 views

Unrestricted file upload

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

7.5CVSS9.3AI score0.84175EPSS
SaveExploits10References5Affected Software1
Cvelist
Cvelist
•added 2022/07/07 7:38 p.m.•47 views

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.6AI score0.02566EPSS
SaveExploits1References5
CVE
CVE
•added 2022/07/07 7:38 p.m.•181 views

CVE-2021-29281

CVE-2021-29281 is a file-upload vulnerability in GFI Mail Archiver prior to or up to v15.1 caused by insecure use of the Telerik Web UI plugin, tying to CVE-2014-2217 and CVE-2017-11317. The vulnerability enables arbitrary file uploads/execution via the Telerik UI for ASP.NET AJAX file upload iss...

9.8CVSS9.4AI score0.02566EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2022/07/07 12:00 a.m.•21 views

GFI Mail Archiver 代码问题漏洞

GFI Mail Archiver is used by GFI Malta to easily protect, store and retrieve electronic communications. A security vulnerability exists in GFI Mail Archiver version 15.1, which stems from the insecure use of the Telerik Web UI plugin affected by CVE-2014-2217 and CVE-2017-11317, which can be...

9.8CVSS8.4AI score0.02566EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/07/07 12:00 a.m.•2 views

PT-2022-9917

‼ CVE-2021-29281 ‼ File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317. 📖 Read via "National Vulnerability Database"...

9.8CVSS0.02566EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/07 12:00 a.m.•7 views

CVE-2021-29281: Unrestricted Upload of File with Dangerous Type

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.8CVSS8.1AI score0.02566EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/07/06 12:00 a.m.•7 views

CVE-2022-34166

IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229430...

5.4CVSS6AI score0.00659EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder