Lucene search
+L

3090 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/10 12:00 a.m.•4 views

CVE-2018-8518: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

5.4CVSS6.5AI score0.02813EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/10 12:00 a.m.•2 views

CVE-2018-8498: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

5.4CVSS6.5AI score0.02256EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/10/10 12:00 a.m.•16 views

IBM QRadar Incident Forensics Information Disclosure Vulnerability

IBM QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and the repair of network security vulnerabilities. A security vulnerability exists in IBM QRada...

7.7CVSS7.1AI score0.02536EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2018/10/09 7:00 a.m.•26 views

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS1.2AI score0.02256EPSS
SaveExploits0
OSV
OSV
•added 2018/10/05 2:29 p.m.•10 views

CVE-2018-0440

A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user input within an HTTP...

7.2CVSS5.9AI score0.02253EPSS
SaveExploits0References2
NVD
NVD
•added 2018/09/17 3:29 p.m.•29 views

CVE-2016-9045

A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability...

8.8CVSS8.8AI score0.02211EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2018/09/17 3:00 p.m.•40 views

CVE-2016-9045

A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability...

8.8CVSS8.8AI score0.02211EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/17 12:00 a.m.•6 views

CVE-2016-9045: Deserialization of Untrusted Data

A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability...

8.8CVSS8.1AI score0.02211EPSS
SaveExploits2References2
CNVD
CNVD
•added 2018/09/14 12:00 a.m.•11 views

ASUS GT-AC5300 Denial of Service Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A security vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. An attacker can exploit the vulnerability by sending 'GET / HTTP/1.1\r\n' to cause a denial of service...

7.8CVSS7.5AI score0.02078EPSS
SaveExploits1References1
OSV
OSV
•added 2018/09/13 12:29 a.m.•5 views

CVE-2018-8431

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

5.4CVSS5.8AI score0.02253EPSS
SaveExploits0References3
OSV
OSV
•added 2018/09/13 12:29 a.m.•5 views

CVE-2018-8428

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

5.4CVSS5.8AI score0.01725EPSS
SaveExploits0References2
NVD
NVD
•added 2018/09/13 12:29 a.m.•24 views

CVE-2018-8431

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

5.4CVSS5.4AI score0.02253EPSS
SaveExploits0References3
Prion
Prion
•added 2018/09/13 12:29 a.m.•23 views

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

3.5CVSS5.7AI score0.02253EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2018/09/13 12:29 a.m.•10 views

CVE-2018-8426

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint...

5.4CVSS5.5AI score0.02253EPSS
SaveExploits0References4
Prion
Prion
•added 2018/09/13 12:29 a.m.•19 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint...

3.5CVSS5.2AI score0.02253EPSS
SaveExploits0References3Affected Software2
attackerkb
attackerkb
•added 2018/09/13 12:29 a.m.•11 views

CVE-2018-8428

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

5.4CVSS5.6AI score0.02253EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2018/09/13 12:29 a.m.•8 views

CVE-2018-8431

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

5.4CVSS5.6AI score0.02253EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/13 12:00 a.m.•3 views

CVE-2018-8428: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

5.4CVSS6.5AI score0.01725EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/13 12:00 a.m.•2 views

CVE-2018-8431: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

5.4CVSS6.5AI score0.02253EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/09/13 12:00 a.m.•43 views

CVE-2018-8426

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint...

5.3AI score0.02253EPSS
SaveExploits0References3
Rows per page
Query Builder