Lucene search
K

10 matches found

CVE
CVE
added 2026/01/28 8:2 p.m.5 views

CVE-2025-13983

Summary of CVE-2025-13983 (Drupal Tagify XSS) A Cross-Site Scripting vulnerability affects the Drupal Tagify module, specifically Tagify up to version 1.2.43 (i.e., before 1.2.44). The root cause is improper neutralization of input during web page generation, which can allow attackers to inject s...

5.4CVSS5.9AI score0.00054EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2025/11/14 4:53 a.m.6 views

CVE-2024-13983

creationtimestamp| type| source ---|---|--- 2025-11-14 04:53:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5kv5vfpx32n...

6.3CVSS5.8AI score0.00095EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/11/14 2:29 a.m.6 views

CVE-2024-13983

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

0.00095EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:31 a.m.7 views

CVE-2019-13983

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...

9.8CVSS6.9AI score0.00256EPSS
Exploits0References1
CVE
CVE
added 2020/07/10 3:23 p.m.33 views

CVE-2020-13983

CVE-2020-13983 is rejected/not used and does not represent an active vulnerability entry.

8.7AI score
Exploits0
OSV
OSV
added 2019/07/19 3:15 p.m.13 views

CVE-2019-13983

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...

9.8CVSS6.9AI score
Exploits0References2
Circl
Circl
added 2019/05/06 10:33 p.m.1 views

CVE-2018-13983

creationtimestamp| type| source ---|---|--- 2019-05-06 22:33:21+00:00| seen| https://t.me/cibsecurity/4123 2019-05-06 22:48:07+00:00| seen| https://t.me/cibsecurity/4125...

6.1CVSS6AI score0.00285EPSS
Exploits2References2
CVE
CVE
added 2019/05/06 6:20 p.m.39 views

CVE-2018-13983

ImpressCMS 1.3.10 is affected by an XSS vulnerability triggered via PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php. The root cause is unvalidated PATH_INFO leading to cross-site scripting, enabling arbitrary HTML/JS execution in a us...

6.1CVSS5.9AI score0.00285EPSS
Exploits2References3Affected Software1
Packet Storm
Packet Storm
added 2019/01/02 12:0 a.m.47 views

ImpressCMS 1.3.10 Cross Site Scripting

Multiple Cross-site Scripting Vulnerabilities in ImpressCMS 1.3.10 Information -------------------- Advisory by Netsparker Name: Reflected and Stored XSS Vulnerabilities in ImpressCMS Affected Software: ImpressCMS Affected Versions: 1.3.10 Homepage: https://www.impresscms.org/ Vulnerability:...

0.00285EPSS
Exploits2
CVE
CVE
added 2017/09/29 2:0 p.m.48 views

CVE-2017-13983

CVE-2017-13983 describes an authentication bypass vulnerability in the HPE BSM Platform Application Performance Management System Health (Health) suite, affecting versions 9.26, 9.30 and 9.40. The flaw enables remote attackers to bypass authentication, with the ZDI advisory noting the System Heal...

10CVSS9.5AI score0.11556EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder