Lucene search
K

326 matches found

NVD
NVD
added 2017/02/01 8:59 p.m.18 views

CVE-2016-8921

IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

8.8CVSS8.9AI score0.02235EPSS
Exploits0References2
Prion
Prion
added 2017/02/01 8:59 p.m.15 views

Code injection

IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

6.5CVSS8.1AI score0.02235EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/02/01 8:0 p.m.46 views

CVE-2016-8921

CVE-2016-8921 concerns IBM FileNet Workplace XT (v1.1.5) where a remote attacker can upload arbitrary files due to a file extension validation bypass. The IBM Security Bulletin details that the vulnerability enables uploading malicious content to the FileNet P8 server, potentially leading to code...

8.8CVSS8.9AI score0.02235EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2016/12/02 12:0 a.m.5 views

IBM FileNet Workplace XT Arbitrary File Upload Vulnerability

IBM FileNet is a suite of enterprise content management platforms from IBM in the U.S. IBM FileNet Workplace XT is one of the client Web applications that provides access to document management and business process management. An arbitrary file upload vulnerability exists in IBM FileNet Workplace...

8.8CVSS7AI score0.02235EPSS
Exploits0References1
OSV
OSV
added 2016/11/25 3:59 a.m.5 views

CVE-2016-5981

Cross-site scripting XSS vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace Application Engine through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote attackers to inject arbitrary web script or HTML...

5.4CVSS5.9AI score0.00615EPSS
Exploits0References2
CVE
CVE
added 2016/11/25 3:38 a.m.50 views

CVE-2016-5981

CVE-2016-5981 affects IBM FileNet Workplace XT up to 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) up to 4.0.2.14-P8AE-IF001. The IBM Security Bulletin and related sources describe a cross-site scripting (XSS) vulnerability caused by misconfigured RegExpSecurityFilter and ScriptSe...

5.4CVSS5.2AI score0.00615EPSS
Exploits0References2Affected Software2
hackapp
hackapp
added 2016/11/14 10:3 p.m.75 views

vHack XT - Hacking Simulator - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application vHack XT - Hacking Simulator published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
CNVD
CNVD
added 2016/10/16 12:0 a.m.3 views

IBM FileNet Workplace XT and FileNet Workplace Cross-Site Scripting Vulnerabilities

IBM FileNet Workplace XT and FileNet Workplace are among the client Web applications that provide access to file management and business process management. A cross-site scripting vulnerability exists in IBM FileNet Workplace XT and FileNet Workplace, which could be exploited by remote attackers ...

5.4CVSS6.2AI score0.00615EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/06 12:0 a.m.3 views

Sierra Wireless AirLink Raven XE/XT Unauthorized Access Vulnerability

The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. An unauthorized access vulnerability exists in AirLink Raven XT and XE. An unauthenticated, remote attacker could exploit the vulnerability to access system...

7.1AI score
Exploits0References1
CNVD
CNVD
added 2016/07/06 12:0 a.m.4 views

Sierra Wireless AirLink Raven XE/XT Credential Sniffing Vulnerability

The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. A credential sniffing vulnerability exists in AirLink Raven XT and XE. An attacker can exploit the vulnerability to sniff credentials and log into the system...

7AI score
Exploits0References1
OSV
OSV
added 2016/03/10 12:0 a.m.3 views

UBUNTU-CVE-2016-3135

Integer overflow in the xtalloctableinfo function in net/netfilter/xtables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service heap memory corruption via an IPTSOSETREPLACE setsockopt call...

7.8CVSS7.1AI score0.01009EPSS
Exploits1References12
seebug.org
seebug.org
added 2015/05/19 12:0 a.m.220 views

Coremail XT-3.0 /coremail/XT3/main/intervalCheck.jsp 跨站脚本漏洞

No description provided by source...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the qt-Xt-2.3.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

7.5CVSS5.4AI score0.04146EPSS
Exploits0References2Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

XT-Commerce 1.0 Beta 1 => Pass / Creat and Download Backup Vulnerability

No description provided by source...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Include (RFI) Vulnerability

No description provided by source. Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode milw0rm.com...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.35 views

php wcms XT 0.0.7 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

Xt-News 0.1 add_comment.php id_news Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

Xt-News 0.1 show_news.php id_news Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

Xt-News 0.1 show_news.php id_news Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit...

7.1AI score
Exploits0
Prion
Prion
added 2013/09/25 10:31 a.m.25 views

Stack overflow

Stack-based buffer overflow in the subE110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service memory corruption by writing a long string to the /dev/socket/initrunit...

6.9CVSS7.6AI score0.00178EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder