Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:45 p.m.6 views

CVE-2022-43686

In Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2, the authTypeConcreteCookieMap table can be filled up causing a denial of service high load...

6.5CVSS6.8AI score0.00797EPSS
Exploits0References1
Circl
Circl
added 2024/10/04 10:43 p.m.1 views

CVE-2024-43686

creationtimestamp| type| source ---|---|--- 2024-10-04 22:43:45+00:00| seen| https://t.me/cvedetector/7026...

6.1CVSS4.8AI score0.11264EPSS
Exploits0References1
NVD
NVD
added 2024/10/04 8:15 p.m.14 views

CVE-2024-43686

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimeProvider 4100 data plot modules allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7...

6.1CVSS0.11264EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/10/04 7:47 p.m.16 views

CVE-2024-43686 Reflected XSS in TimeProvider 4100 chart component

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimeProvider 4100 data plot modules allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7...

5.4CVSS0.11264EPSS
Exploits0References2
CVE
CVE
added 2024/10/04 7:47 p.m.50 views

CVE-2024-43686

CVE-2024-43686 affects Microchip TimeProvider 4100 data plot modules. Vulnerable in TimeProvider 4100 versions 1.0 through before 2.4.7; condition is improper neutralization of input during web page generation, resulting in reflected XSS. Connected sources specify an affected product scope and th...

6.1CVSS6.3AI score0.11264EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/11/16 7:54 a.m.1 views

CVE-2022-43686

creationtimestamp| type| source ---|---|--- 2022-11-16 07:54:41+00:00| seen| https://t.me/cibsecurity/52990...

6.5CVSS6.3AI score0.00797EPSS
Exploits0References1
CVE
CVE
added 2022/11/14 12:0 a.m.84 views

CVE-2022-43686

Summary (CVE-2022-43686): Concrete CMS is affected in versions

6.5CVSS6.3AI score0.00797EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2021/12/02 12:17 p.m.29 views

CVE-2021-43686

CVE-2021-43686 affects nZEDb v0.4.20. The vulnerability is a Cross Site Scripting (XSS) in www/pages/api.php where the exit function terminates the script and prints the value provided via the input parameter $_GET['t']. The root cause is improper handling/filtering of input data in that path, en...

6.1CVSS6AI score0.00223EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2020/05/28 12:0 a.m.1 views

Cross-site scripting vulnerability in WebKit component of multiple Apple products (CNVD-2020-43686)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A cross-site scripting vulnerability exists in the WebKit component of several App...

7.1CVSS8.7AI score0.00818EPSS
Exploits0References1
Rows per page
Query Builder