14 matches found
CVE-2025-22359
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...
CVE-2025-22359
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...
CVE-2025-22359 WordPress SyncFields plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pjfc SyncFields syncfields allows Reflected XSS.This issue affects SyncFields: from n/a through = 2.1...
CVE-2025-22359 WordPress SyncFields plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PJFC SyncFields allows Reflected XSS.This issue affects SyncFields: from n/a through 2.1...
CVE-2024-22359 IBM UrbanCode Deploy cross-site scripting
IBM UrbanCode Deploy UCD 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM DevOps Deploy 8.0 through 8.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend...
CVE-2023-22359
User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...
CVE-2023-22359 User-enumeration in RestAPI
User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...
CVE-2023-22359 User-enumeration in RestAPI
User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...
CVE-2023-22359
CVE-2023-22359 describes a user-enumeration issue in Checkmk versions up to 2.2.0p4. The provided documents consistently frame the vulnerability as an authenticated user enumeration of usernames, without detailing specific exploit steps, affected modules, or exploitability in the wild. No concret...
CVE-2022-22359
creationtimestamp| type| source ---|---|--- 2022-07-19 20:40:50+00:00| seen| https://t.me/cibsecurity/46562...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to cross-site request forgery (CVE-2022-22359)
Summary IBM Sterling Partner Engagement Manager could allow a remote attacker to enable Cross-Site Request Forgery CSRF on the system, caused by a parameter from a user request. The issue has been addressed. Vulnerability Details CVEID:CVE-2022-22359 DESCRIPTION: IBM Sterling Partner Engagement...
CVE-2022-22359
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220652...
CVE-2021-22359
There is a DoS vulnerability (CVE-2021-22359) in Huawei S5700 and S6700 switches (V200R005C00SPC500) caused by insufficient input validation, allowing an attacker to send a crafted message to trigger service disruption. The issue is documented across multiple sources (NVD, Red Hat, Huawei PSIRT) ...
Security Advisory - Denial of Service Vulnerability in Some Huawei Products
There is a denial of service vulnerability in some Huawei products. An attacker could exploit this vulnerability by sending specific message to a targeted device. Due to insufficient input validation, successful exploit can cause the service abnormal. Vulnerability ID: HWPSIRT-2020-24699 This...