Lucene search
K

7 matches found

OSV
OSV
added 2024/03/06 11:8 a.m.11 views

BIT-WEBLATE-2022-24710

Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed i...

5.4CVSS5.2AI score0.00311EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/02/25 10:18 p.m.33 views

Cross-site Scripting in Weblate

Impact Due to improper neutralization, it was possible to perform cross-site scripting via crafted user and language names. Patches The issues were fixed in the 4.11 release. The following commits are addressing it: f6753a1a1c63fade6ad418fbda827c6750ab0bda 9e19a8414337692cc90da2a91c9af5420f2952f1...

5.4CVSS0.3AI score0.00311EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/02/25 10:18 p.m.35 views

GHSA-6JP6-9RF9-GC66 Cross-site Scripting in Weblate

Impact Due to improper neutralization, it was possible to perform cross-site scripting via crafted user and language names. Patches The issues were fixed in the 4.11 release. The following commits are addressing it: f6753a1a1c63fade6ad418fbda827c6750ab0bda 9e19a8414337692cc90da2a91c9af5420f2952f1...

5.4CVSS5.2AI score0.00311EPSS
Exploits0References7
NVD
NVD
added 2022/02/25 9:15 p.m.7 views

CVE-2022-24710

Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed i...

5.4CVSS0.00311EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/02/25 8:50 p.m.12 views

CVE-2022-24710 Cross-site Scripting in Weblate

Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed i...

5.4CVSS5.5AI score0.00311EPSS
Exploits0References4
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

FreeBSD (4.x , < 5.4) master.passwd Disclosure Exploit

No description provided by source. / FreeBSD master.passwd disclosure exploit by kcope in 2005, kingcopeatgmx.net thanks to revoguard just compile and execute .. look into the kmem file it contains the master.passwd tested on unpatched FreeBSD 4.11-RELEASE advisory:...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2007/12/26 12:0 a.m.26 views

FreeBSD (4.x , &lt; 5.4) master.passwd Disclosure Exploit

No description provided by source. / FreeBSD master.passwd disclosure exploit by kcope in 2005, kingcopeatgmx.net thanks to revoguard just compile and execute .. look into the kmem file it contains the master.passwd tested on unpatched FreeBSD 4.11-RELEASE advisory:...

7.1AI score
Exploits0
Rows per page
Query Builder