Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
disclosure management vulnerabilities and exploits
(subscribe to this query)
8.3
CVSSv3
CVE-2021-27275
This vulnerability allows remote malicious users to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentic...
Netgear Prosafe Network Management System 1.6.0.26
6.5
CVSSv3
CVE-2019-1313
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376.
Microsoft Sql Server Management Studio 18.3
Microsoft Sql Server Management Studio 18.3.1
1 Article
5.4
CVSSv3
CVE-2016-8968
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998515.
Ibm Rational Collaborative Lifecycle Management 6.0.2
Ibm Rational Collaborative Lifecycle Management 6.0.0
Ibm Rational Collaborative Lifecycle Management 6.0.1
5.4
CVSSv3
CVE-2016-9715
IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...
Ibm Infosphere Master Data Management Server 11.0
Ibm Infosphere Master Data Management Server 11.4
Ibm Infosphere Master Data Management Server 11.6
Ibm Infosphere Master Data Management Server 11.3
Ibm Infosphere Master Data Management Server 11.5
5.4
CVSSv3
CVE-2020-11838
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x before 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
Microfocus Arcsight Management Center
Microfocus Arcsight Management Center 2.6.1
7.5
CVSSv3
CVE-2013-4786
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote malicious users to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
Oracle Fujitsu M10 Firmware
Intel Intelligent Platform Management Interface 2.0
1 EDB exploit
1 Github repository
7.5
CVSSv3
CVE-2023-26774
An issue found in Sales Tracker Management System v.1.0 allows a remote malicious user to access sensitive information via sales.php component of the admin/reports endpoint.
Sales Tracker Management System Project Sales Tracker Management System 1.0
5.4
CVSSv3
CVE-2020-4920
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...
Ibm Collaborative Lifecycle Management 6.0.2
Ibm Collaborative Lifecycle Management 6.0.6
Ibm Collaborative Lifecycle Management 6.0.6.1
Ibm Doors Next 7.0.0
Ibm Doors Next 7.0.1
Ibm Doors Next 7.0.2
Ibm Engineering Insights 7.0.0
Ibm Engineering Insights 7.0.1
Ibm Engineering Insights 7.0.2
Ibm Engineering Lifecycle Management 7.0.0
Ibm Engineering Lifecycle Management 7.0.1
Ibm Engineering Lifecycle Management 7.0.2
Ibm Engineering Requirements Management Doors Next 6.0.2
Ibm Engineering Requirements Management Doors Next 6.0.6
Ibm Engineering Requirements Management Doors Next 6.0.6.1
Ibm Engineering Test Management 7.0.0
Ibm Engineering Test Management 7.0.1
Ibm Engineering Test Management 7.0.2
Ibm Engineering Workflow Management 7.0.0
Ibm Engineering Workflow Management 7.0.1
Ibm Engineering Workflow Management 7.0.2
Ibm Rational Engineering Lifecycle Manager 6.0.2
4.9
CVSSv3
CVE-2022-28063
Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.
Simple Bakery Shop Management System Project Simple Bakery Shop Management System 1.0
5.4
CVSSv3
CVE-2022-35714
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management 7.6.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
6
7
8
9
10
NEXT »