Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
application express vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2018-16483
A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.
Express-cart Project Express-cart
7.5
CVSSv3
CVE-2022-27261
An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows malicious users to upload multiple files with the same name, causing an overwrite of files in the web application server.
Express-fileupload Project Express-fileupload 1.3.1
NA
CVE-2004-0380
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote malicious users to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references th...
Microsoft Outlook Express 5.5
Microsoft Outlook Express 6.0
3 EDB exploits
NA
CVE-2000-0104
The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Web Express Shoptron 1.2
5.3
CVSSv3
CVE-2017-13990
An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version before 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disclosure of Apache Tomcat application server version.
Hp Arcsight Enterprise Security Manager 6.8
Hp Arcsight Enterprise Security Manager 6.5
Hp Arcsight Enterprise Security Manager 6.0
Hp Arcsight Enterprise Security Manager 6.11.0
Hp Arcsight Enterprise Security Manager 6.0c
Hp Arcsight Enterprise Security Manager 6.5c
Hp Arcsight Enterprise Security Manager 6.8c
Hp Arcsight Enterprise Security Manager 6.9.0c
Hp Arcsight Enterprise Security Manager 6.9.1c
Hp Arcsight Enterprise Security Manager Express 6.11.0
Hp Arcsight Enterprise Security Manager Express 6.8
Hp Arcsight Enterprise Security Manager Express 6.8c
Hp Arcsight Enterprise Security Manager Express 6.5c
Hp Arcsight Enterprise Security Manager Express 6.5
Hp Arcsight Enterprise Security Manager Express 6.0c
Hp Arcsight Enterprise Security Manager Express 6.0
Hp Arcsight Enterprise Security Manager Express 6.9.1c
Hp Arcsight Enterprise Security Manager Express 6.9.0
8.8
CVSSv3
CVE-2021-41246
Express OpenID Connect is express JS middleware implementing sign on for Express web apps using OpenID Connect. Versions before and including `2.5.1` do not regenerate the session id and session cookie when user logs in. This behavior opens up the application to various session f...
Auth0 Express Openid Connect
NA
CVE-2005-4794
Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote malicious users to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset.
Cisco Ip Phone 7905
Cisco Ip Phone 7912
Cisco Unity Express
Cisco Application And Content Networking Software
Cisco Ata 186
Cisco Ata 188
Cisco Subscriber Edge Services Manager
Cisco Ip Phone 7902
7.5
CVSSv3
CVE-2016-6426
The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 up to and including 9.1(1), as used in Unified Contact Center Express 10.0(1) up to and including 11.0(1), allows remote malicious users to create user accounts by visiting an unspecified...
Cisco Unified Contact Center Express 11.0\\(1\\)
Cisco Unified Intelligence Center 8.5.4
Cisco Unified Contact Center Express 10.6\\(1\\)
Cisco Unified Intelligence Center 9.0\\(2\\)
Cisco Unified Contact Center Express 10.5\\(1\\)
Cisco Unified Intelligence Center 9.1\\(1\\)
Cisco Unified Contact Center Express 10.0\\(1\\)
NA
CVE-2014-6876
The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof servers and obtain sensitive information via a crafted certificate.
Serve American Express Serve \\@7f0901e4
6.1
CVSSv3
CVE-2020-26870
Cure53 DOMPurify prior to 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.
Cure53 Dompurify
Debian Debian Linux 9.0
Microsoft Visual Studio 2017 15.9
Microsoft Visual Studio 2019 16.0
Microsoft Visual Studio 2019 16.4
Microsoft Visual Studio 2019 16.8
Microsoft Visual Studio 2019 16.7
Oracle Application Express
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28254
CVE-2024-32515
CVE-2024-21338
validation
CVE-2024-32522
dos
CVE-2024-2101
CVE-2024-21107
elevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »