Page 74 of 828 results (0.007 seconds)

CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2015-0139

https://notcve.org/view.php?id=CVE-2015-0139

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en IBM WebSphere Portal 8.0.0 hasta 8.0.0.1 CF15 y 8.5.0 anterior a CF05 permite a usuarios remotos autenticados inyectar secuencias de comandos web arbitrarios o HTML a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg1PI33329 http://www-01.ibm.com/support/docview.wss?uid=swg21697213 http://www.securitytracker.com/id/1031880 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 3.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-0177

https://notcve.org/view.php?id=CVE-2015-0177

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en IBM WebSphere Portal 8.5.0 anterior a CF05 permite a usuarios remotos autenticados inyectar secuencias de comandos arbitrarios o HTML a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg1PI35228 http://www-01.ibm.com/support/docview.wss?uid=swg21697213 http://www.securitytracker.com/id/1031880 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-0133

https://notcve.org/view.php?id=CVE-2015-0133

IBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary files and possibly obtain administrative privileges via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. IBM WebSphere Commerce 7.0 Feature Pack 4 hasta 8 permite a atacantes remotos leer ficheros arbitrarios y posiblemente obtener privilegios de administrador a través de una declaración de entidad externa XML en conjunto con una referencia de entidad, relacionado con un problema de entidad externa XML (XXE). • http://www-01.ibm.com/support/docview.wss?uid=swg1JR52499 http://www-01.ibm.com/support/docview.wss?uid=swg21696242 http://www.securitytracker.com/id/1031881 •

CVSS: 3.5EPSS: 0%CPEs: 14EXPL: 0

CVE-2014-8909

https://notcve.org/view.php?id=CVE-2014-8909

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF29, 8.0.0.x before 8.0.0.1 CF15, and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en IBM WebSphere Portal 6.1.0.x hasta 6.1.0.6 CF27, 6.1.5.x hasta 6.1.5.3 CF27, 7.0.0.x hasta 7.0.0.2 CF29, 8.0.0.x hasta 8.0.0.1 CF15, y 8.5.0 anterior a CF05 permite a usuarios remotos autenticados inyectar secuencias de comandos web arbitrarios o HTML a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg1PI30620 http://www-01.ibm.com/support/docview.wss?uid=swg21694738 https://exchange.xforce.ibmcloud.com/vulnerabilities/99250 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 3.5EPSS: 0%CPEs: 25EXPL: 0

CVE-2014-4771

https://notcve.org/view.php?id=CVE-2014-4771

IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote authenticated users to cause a denial of service (queue-slot exhaustion) by leveraging PCF query privileges for a crafted query. IBM WebSphere MQ 7.0.1 anterior a 7.0.1.13, 7.1 anterior a 7.1.0.6, 7.5 anterior a 7.5.0.5, y 8 anterior a 8.0.0.1 permite a usuarios remotos autenticados causar una denegación de servicio (agotamiento del hueco en cola) mediante el aprovechamiento de los privilegios de consultas PCF para una consulta manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV69190 http://www-01.ibm.com/support/docview.wss?uid=swg21696120 https://exchange.xforce.ibmcloud.com/vulnerabilities/94842 • CWE-399: Resource Management Errors •