Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/02/06 2:24 a.m.3 views

CVE-2025-22359

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...

7.1CVSS7.2AI score0.00241EPSS
Exploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.7 views

CVE-2025-22359

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...

7.1CVSS0.00241EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/07 10:48 a.m.12 views

CVE-2025-22359 WordPress SyncFields plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...

7.1CVSS0.00241EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:48 a.m.4 views

CVE-2025-22359 WordPress SyncFields plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PJFC SyncFields allows Reflected XSS.This issue affects SyncFields: from n/a through 2.1...

7.1CVSS7AI score0.00241EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/12 4:20 p.m.16 views

CVE-2024-22359 IBM UrbanCode Deploy cross-site scripting

IBM UrbanCode Deploy UCD 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend...

6.1CVSS6.1AI score0.0017EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/06/26 7:15 a.m.10 views

CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

4.3CVSS5.9AI score0.00351EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/06/26 6:51 a.m.13 views

CVE-2023-22359 User-enumeration in RestAPI

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

4.3CVSS6.6AI score0.00351EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/06/26 6:51 a.m.13 views

CVE-2023-22359 User-enumeration in RestAPI

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

4.3CVSS4.8AI score0.00351EPSS
Exploits0References1
CVE
CVE
added 2023/06/26 6:51 a.m.44 views

CVE-2023-22359

CVE-2023-22359 describes a user-enumeration issue in Checkmk versions up to 2.2.0p4. The provided documents consistently frame the vulnerability as an authenticated user enumeration of usernames, without detailing specific exploit steps, affected modules, or exploitability in the wild. No concret...

4.3CVSS4.3AI score0.00351EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/07/19 8:40 p.m.2 views

CVE-2022-22359

creationtimestamp| type| source ---|---|--- 2022-07-19 20:40:50+00:00| seen| https://t.me/cibsecurity/46562...

6.5CVSS4.8AI score0.0008EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/07/18 11:43 a.m.36 views

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to cross-site request forgery (CVE-2022-22359)

Summary IBM Sterling Partner Engagement Manager could allow a remote attacker to enable Cross-Site Request Forgery CSRF on the system, caused by a parameter from a user request. The issue has been addressed. Vulnerability Details CVEID:CVE-2022-22359 DESCRIPTION: IBM Sterling Partner Engagement...

6.5CVSS5.6AI score0.0008EPSS
Exploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/18 12:0 a.m.3 views

CVE-2022-22359

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220652...

6.5CVSS6AI score0.0008EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2021/05/27 12:40 p.m.60 views

CVE-2021-22359

There is a DoS vulnerability (CVE-2021-22359) in Huawei S5700 and S6700 switches (V200R005C00SPC500) caused by insufficient input validation, allowing an attacker to send a crafted message to trigger service disruption. The issue is documented across multiple sources (NVD, Red Hat, Huawei PSIRT) ...

7.8CVSS7.3AI score0.00172EPSS
Exploits0References1Affected Software1
Huawei
Huawei
added 2021/05/19 12:0 a.m.37 views

Security Advisory - Denial of Service Vulnerability in Some Huawei Products

There is a denial of service vulnerability in some Huawei products. An attacker could exploit this vulnerability by sending specific message to a targeted device. Due to insufficient input validation, successful exploit can cause the service abnormal. Vulnerability ID: HWPSIRT-2020-24699 This...

7.8CVSS7.3AI score0.00172EPSS
Exploits0Affected Software2
Rows per page
Query Builder