Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nnposter vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2008-1510
Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote malicious users to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.
Alkacon Opencms 7.0.3
1 EDB exploit
4.3
CVSSv2
CVE-2008-2637
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote malicious users to inject arbitrary web script or HTML via quotes in (1) the css_exceptions parameter in vdesk/admincon/webyfiers.php and (2) the...
F5 Firepass Ssl Vpn 6.0.2
2 EDB exploits
4
CVSSv2
CVE-2008-1301
Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.
Alkacon Opencms 7.0.3
Alkacon Opencms 7.0.4
1 EDB exploit
5
CVSSv2
CVE-2007-3151
rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote malicious users to cause a denial of service (device reboot) via a request with empty values of the OP.MEAS.DATAQUERY and MEAS.TYPE parameters.
Packeteer Packetshaper 7.3.0g2
Packeteer Packetshaper 7.5.0g1
1 EDB exploit
4.3
CVSSv2
CVE-2008-1045
Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote malicious users to inject arbitrary web script or HTML via the resource parameter.
Alkacon Opencms 7.0.3
1 EDB exploit
4.3
CVSSv2
CVE-2008-1300
Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote malicious users to inject arbitrary web script or HTML via the filePath.0 para...
Alkacon Opencms 7.0.3
Alkacon Opencms 7.0.4
1 EDB exploit
4.3
CVSSv2
CVE-2007-6037
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote malicious users to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters.
Citrix Netscaler 8.0 Build 47.8
1 EDB exploit
7.8
CVSSv2
CVE-2008-3494
8e6 R3000 Internet Filter 2.0.12.10 allows remote malicious users to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header.
8e6 R3000 Internet Filter 2.0.12.10
1 EDB exploit
6.8
CVSSv2
CVE-2008-7032
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote malicious users to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstr...
F5 Big-ip 9.4.3
1 EDB exploit
7.1
CVSSv2
CVE-2007-3201
Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote malicious users to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID c...
Winpt Winpt 1.2.0
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »