Vulnerabilities
Vulnerable Software
Security Vulnerabilities - CVEs Published In 2018
Artica Integria IMS 5.0.83 has XSS via the search_string parameter.
CVSS Score
6.1
EPSS Score
0.003
Published
2018-12-17
Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.
CVSS Score
6.1
EPSS Score
0.03
Published
2018-12-17
PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion.
CVSS Score
6.5
EPSS Score
0.003
Published
2018-12-17
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) techniques. IBM X-Force ID: 124740.
CVSS Score
3.7
EPSS Score
0.001
Published
2018-12-17
IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747.
CVSS Score
3.7
EPSS Score
0.002
Published
2018-12-17
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610.
CVSS Score
5.9
EPSS Score
0.003
Published
2018-12-17
IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152080.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-12-17
IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152082.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-12-17
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-12-17
The yaml_parse.load method in Pylearn2 allows code injection.
CVSS Score
9.8
EPSS Score
0.005
Published
2018-12-17


Contact Us

Shodan ® - All rights reserved