Lucene search
+L

691 matches found

OSV
OSV
added 2023/07/06 12:0 a.m.40 views

CVE-2023-34192

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function...

9CVSS7.1AI score0.77266EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/06/30 12:0 a.m.36 views

Oracle Linux 8 : sqlite (ELSA-2023-3840)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3840 advisory. - Bumped release to add correct changelog entry. Version 3.26.0-18 fixes CVE-2020-24736 Tenable has extracted the preceding description block directly from the...

5.5CVSS6.7AI score0.00347EPSS
SaveExploits1References2
NVD
NVD
added 2023/06/27 6:15 p.m.19 views

CVE-2023-34836

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters...

5.4CVSS5.8AI score0.00813EPSS
SaveExploits1References1
Prion
Prion
added 2023/06/27 6:15 p.m.16 views

Cross site scripting

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

4.9CVSS5.7AI score0.00813EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/06/27 6:15 p.m.24 views

Cross site scripting

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters...

4.9CVSS5.8AI score0.00813EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/06/27 12:0 a.m.34 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

6AI score0.00813EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/06/27 12:0 a.m.9 views

MicroWorld Technologies eScan Management Console 跨站脚本漏洞

The MicroWorld Technologies eScan Management Console is an eScan management console from MicroWorld Technologies, Inc. A cross-site scripting vulnerability exists in Microworld Technologies eScan Management console version v.14.0.1400.2281, which originates from a vulnerability that allows a remo...

5.4CVSS6AI score0.00813EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/06/27 12:0 a.m.14 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

7.2AI score0.00813EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2023/06/20 3:31 p.m.26 views

NodCMS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows an attacker with administrative privileges to execute arbitrary code and gain access to sensitive information via a crafted script to the address parameter...

4.8CVSS7.2AI score0.00546EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/06/20 3:31 p.m.9 views

GHSA-7XQX-XWG9-JX34 NodCMS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows an attacker with administrative privileges to execute arbitrary code and gain access to sensitive information via a crafted script to the address parameter...

4.8CVSS5.3AI score0.00546EPSS
SaveExploits1References3
NVD
NVD
added 2023/06/20 3:15 p.m.28 views

CVE-2020-20697

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter...

4.8CVSS5.5AI score0.00546EPSS
SaveExploits1References1
OSV
OSV
added 2023/06/20 3:15 p.m.13 views

CVE-2020-20697

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter...

4.8CVSS7.4AI score
SaveExploits0References1
Prion
Prion
added 2023/06/20 3:15 p.m.14 views

Cross site scripting

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter...

4.3CVSS5.5AI score0.00546EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/19 12:0 a.m.8 views

The vulnerability of the Windows SMB Witness service allows a hacker to bypass access control procedures for RPC processes.

The vulnerability of the Windows SMB Witness service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass access checks for RPC procedures using a specially created script...

7.5CVSS7.4AI score0.01203EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/06/19 12:0 a.m.9 views

The vulnerability of the Windows Server operating system allows a perpetrator to bypass access control for RPC procedures.

The vulnerability of Windows Server operating system services is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access control procedures for RPC calls using a specially created script...

8CVSS7.4AI score0.00773EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/06/18 12:0 a.m.51 views

Adobe Commerce Security Bypass Vulnerability

Adobe Commerce is the United States of America Odobie Adobe company of a business and brand-oriented digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to trigger a specially crafted script to bypass security features...

6.5CVSS6.7AI score0.00793EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/15 12:0 a.m.9 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company of a business and brand-oriented digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to trigger a specially crafted script to bypass security features...

6.5CVSS6.6AI score0.00793EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.3 views

PT-2023-3123 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server Service affected versions not specified Description: The issue is related to errors in security settings of the Windows Server operating system, allowing a remote attacker to bypass access checks to RPC procedures using a...

8CVSS9.3AI score0.00773EPSS
SaveExploits0References9
NVD
NVD
added 2023/05/12 11:15 a.m.25 views

CVE-2023-30130

An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter...

8.8CVSS8.8AI score0.01416EPSS
SaveExploits1References2
NVD
NVD
added 2023/05/12 1:15 a.m.14 views

CVE-2023-29809

SQL injection vulnerability found in Maximilian Vogt companymaps cmaps v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request...

9.8CVSS9.6AI score0.10514EPSS
SaveExploits5References3
Rows per page
Query Builder