Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.
Known exploited vulnerabilities as a queryable table — by CVE, vendor or product.
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.
dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server.
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.
Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.