Show filters
78 Total Results
Displaying 11-20 of 78
Sort by:
Attacker Value
Unknown
CVE-2022-24239
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
0
Attacker Value
Unknown
CVE-2022-24238
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp.
0
Attacker Value
Unknown
CVE-2021-45105
Disclosure Date: December 18, 2021 (last updated February 23, 2025)
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
0
Attacker Value
Unknown
CVE-2020-18668
Disclosure Date: June 24, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.
0
Attacker Value
Unknown
CVE-2020-18664
Disclosure Date: June 24, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.
0
Attacker Value
Unknown
CVE-2020-18665
Disclosure Date: June 24, 2021 (last updated February 22, 2025)
Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.
0
Attacker Value
Unknown
CVE-2021-25252
Disclosure Date: March 03, 2021 (last updated February 22, 2025)
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.
0
Attacker Value
Unknown
CVE-2020-23659
Disclosure Date: August 26, 2020 (last updated February 22, 2025)
WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.
0
Attacker Value
Unknown
CVE-2011-2487
Disclosure Date: March 11, 2020 (last updated February 21, 2025)
The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
0
Attacker Value
Unknown
CVE-2012-5626
Disclosure Date: January 23, 2020 (last updated November 28, 2024)
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.
0
