Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5047 matches found

CVE
CVE•added 2017/07/12 5:00 p.m.•51 views

CVE-2016-8950

CVE-2016-8950 affects IBM Emptoris Sourcing 9.5.x–10.1.x and is a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM security bulletin confirms this vulnerability and provi...

5.4CVSS5.3AI score0.01221EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/07/12 5:00 p.m.•33 views

CVE-2016-8950

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.2AI score0.01221EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/07/12 5:00 p.m.•32 views

CVE-2016-8946

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.2AI score0.00942EPSS
SaveExploits0References3
n0where
n0where•added 2017/07/10 3:46 p.m.•36 views

Network OSINT Gathering Tool: XRay

XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Does it Work? XRay is a very simple tool, it works this way: 1. It’ll bruteforce subdomains using a wordlist and DNS requests. 2. For every...

6.7AI score
SaveExploits0References1
Packet Storm
Packet Storm•added 2017/07/10 12:00 a.m.•68 views

NfSen 1.3.7 / AlienVault USM/OSSIM 5.3.4 Command Injection

Exploit Title: NfSen/AlienVault remote root exploit IPC query command injection Version: NfSen 1.3.6p1, 1.3.7 and 1.3.7-1bpo80+1all. Previous versions are also likely to be affected. Version: AlienVault 5.3.4 Date: 2017-07-10 Vendor Homepage: http://nfsen.sourceforge.net/ Vendor Homepage:...

9CVSS0.1AI score0.12548EPSS
SaveExploits5
Cvelist
Cvelist•added 2017/07/06 12:00 a.m.•25 views

CVE-2017-6713

A vulnerability in the Play Framework of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to gain full access to the affected system. The vulnerability is due to static, default credentials for the Cisco ESC UI that are shared between installations. An attacke...

9.6AI score0.02623EPSS
SaveExploits0References2
CVE
CVE•added 2017/07/06 12:00 a.m.•50 views

CVE-2017-6713

CVE-2017-6713 affects Cisco Elastic Services Controller (ESC) where the Play Framework UI uses static, default credentials shared across installations. The root cause is these credentials enabling an unauthenticated attacker to generate an admin session token and gain full web UI access. Affected...

10CVSS9.5AI score0.02623EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2017/07/05 6:29 p.m.•19 views

Cross site scripting

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

3.5CVSS6.2AI score0.00927EPSS
SaveExploits0References3Affected Software1
NVD
NVD•added 2017/07/05 6:29 p.m.•23 views

CVE-2017-1096

IBM Jazz Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 12065...

5.4CVSS5.2AI score0.00927EPSS
SaveExploits0References3
Prion
Prion•added 2017/07/05 6:29 p.m.•20 views

Cross site scripting

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

3.5CVSS6.2AI score0.00927EPSS
SaveExploits0References3Affected Software1
NVD
NVD•added 2017/07/05 6:29 p.m.•21 views

CVE-2016-9986

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.4CVSS5.2AI score0.00927EPSS
SaveExploits0References3
NVD
NVD•added 2017/07/05 6:29 p.m.•22 views

CVE-2016-9988

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.4CVSS5.2AI score0.00927EPSS
SaveExploits0References3
Prion
Prion•added 2017/07/05 6:29 p.m.•25 views

Cross site scripting

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

3.5CVSS6.2AI score0.00927EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2017/07/05 6:29 p.m.•22 views

Cross site scripting

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

3.5CVSS6.2AI score0.00927EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2017/07/05 6:29 p.m.•27 views

Cross site scripting

IBM Jazz Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 12065...

3.5CVSS5.2AI score0.00927EPSS
SaveExploits0References3Affected Software1
NVD
NVD•added 2017/07/05 6:29 p.m.•22 views

CVE-2016-9989

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.4CVSS5.2AI score0.00927EPSS
SaveExploits0References3
NVD
NVD•added 2017/07/05 6:29 p.m.•22 views

CVE-2016-9987

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.4CVSS5.2AI score0.00927EPSS
SaveExploits0References3
CVE
CVE•added 2017/07/05 6:00 p.m.•55 views

CVE-2016-9986

The CVE-2016-9986 entry affects IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0. It is a cross-site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. The vulnerability details and CVSS scores are documented in IBM/IBM X-Force reference...

5.4CVSS5.2AI score0.00927EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/07/05 6:00 p.m.•30 views

CVE-2016-9988

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.2AI score0.00927EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/07/05 6:00 p.m.•27 views

CVE-2016-9989

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.2AI score0.00927EPSS
SaveExploits0References3
Rows per page
Query Builder