Lucene search
+L

3810 matches found

OSV
OSV
•added 2023/09/09 9:15 p.m.•20 views

CVE-2023-4864

A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input alert'xss' leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS4AI score0.00604EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/09 9:15 p.m.•50 views

CVE-2023-4864

A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input alert'xss' leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS4.5AI score0.00604EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/09 9:15 p.m.•32 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input alert'xss' leads to cross site scripting. It is possible to initiate the attack...

4CVSS6AI score0.00604EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/09/09 9:00 p.m.•65 views

CVE-2023-4864 SourceCodester Take-Note App index.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input alert'xss' leads to cross site scripting. It is possible to initiate the attack...

4CVSS6.2AI score0.00604EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/09/09 9:00 p.m.•20 views

CVE-2023-4864 SourceCodester Take-Note App index.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input alert'xss' leads to cross site scripting. It is possible to initiate the attack...

4CVSS6.2AI score0.00604EPSS
SaveExploits1References3
CVE
CVE
•added 2023/09/09 9:00 p.m.•77 views

CVE-2023-4864

CVE-2023-4864 affects SourceCodester Take-Note App 1.0. The vulnerability is an XSS in index.php where manipulating the noteContent argument can execute script code (example payload: ). The issue is exploitable remotely and the public exploit has been disclosed (VDB-239349). Multiple connected so...

6.1CVSS4.4AI score0.00604EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/09/09 12:00 a.m.•24 views

SourceCodester Take-Note App Cross-Site Scripting Vulnerability

Take-Note App is a note-taking application by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in SourceCodester Take-Note App, which originates from a cross-site scripting attack via index.php...

6.1CVSS6.2AI score0.00604EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/09/09 12:00 a.m.•5 views

PT-2023-30865

Name of the Vulnerable Software and Affected Versions SourceCodester Take-Note App version 1.0 Description A problematic vulnerability was found in the SourceCodester Take-Note App, affecting an unknown part of the file index.php. The manipulation of the noteContent argument with the input...

6.1CVSS5AI score0.00604EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2023/09/09 12:00 a.m.•9 views

PT-2023-30870

Name of the Vulnerable Software and Affected Versions SourceCodester Take-Note App version 1.0 Description A vulnerability has been found in the SourceCodester Take-Note App, classified as problematic. This issue affects unknown code and leads to cross-site request forgery. The attack can be...

8.8CVSS5.3AI score0.00437EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/09 12:00 a.m.•7 views

CVE-2023-4865: Cross-Site Request Forgery (CSRF)

A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

8.8CVSS5.5AI score0.00437EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/09/09 12:00 a.m.•16 views

Take-Note App Cross-Site Request Forgery Vulnerability

Take-Note App is a note-taking application by the individual developer Remy Andrade. A cross-site request forgery vulnerability exists in Take-Note App version 1.0. An attacker can exploit this vulnerability to perform cross-site request forgery attacks...

8.8CVSS6.8AI score0.00437EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/09 12:00 a.m.•7 views

CVE-2023-4864: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS3.9AI score0.00604EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•10 views

Fedora 37 : php-phpmailer6 (2023-f2be748f28)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f2be748f28 advisory. Minor security note The DSN support added in 6.8.0 reflects the DSN back to the user in an error message if it is invalid. If a DSN uses user-supplied input ...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/09/04 12:00 a.m.•17 views

PT-2023-18329 · Unknown · Bluetooth Host

Name of the Vulnerable Software and Affected Versions: Bluetooth HOST affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Bluetooth HOST. It occurs when passing a descriptor to validate a blacklisted Bluetooth keyboard. There is no...

6.5CVSS6.5AI score0.0037EPSS
SaveExploits0References6
osv-bell
osv-bell
•added 2023/08/31 12:16 p.m.•17 views

BELL-CVE-2022-2057 CVE-2022-2057 does not affect BellSoft software

Bulletin has no description...

6.5CVSS5.8AI score0.01281EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2023/08/31 12:00 a.m.•17 views

The vulnerability of the Joplin note-taking application, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary code.

The vulnerability of the Joplin note-taking application is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS6.7AI score0.00452EPSS
SaveExploits0References4Affected Software1
hivepro
hivepro
•added 2023/08/30 11:09 a.m.•41 views

Unveiling New Windows Ransomware Named Trash Panda

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Trash Panda is a ransomware that encrypts files on Windows machines, replaces the desktop wallpaper, and drops a ransom note with political messages. It adds a ‘.monochrome’ extension to the encrypted...

6.8AI score
SaveExploits0
osv-ubuntu
osv-ubuntu
•added 2023/08/24 5:15 p.m.•18 views

UBUNTU-CVE-2022-46884

A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. Note: This advisory was added on December 13th, 2022 after discovering it was inadvertently left...

8.8CVSS7.3AI score0.00477EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/08/15 12:00 a.m.•15 views

PT-2023-4775 · Microsoft · Office Onenote

Name of the Vulnerable Software and Affected Versions: Microsoft OneNote affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. This allows...

5.5CVSS5.2AI score0.00471EPSS
SaveExploits0References7
Prion
Prion
•added 2023/08/10 3:15 p.m.•450 views

Design/Logic Flaw

Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is rendered in the preview instead of the file being offered to download. Nextcloud Notes app version 4.8.0 contains a...

5.8CVSS6.2AI score0.00588EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder