Lucene search
+L

106 matches found

Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.14 views

PT-2025-46319

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below Description The software is susceptible to a Stored Cross-Site Scripting XSS issue within the Public Folders report functionality. This allows for the injection of malicious...

7.3CVSS5.6AI score0.00489EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/31 3:11 p.m.13 views

CVE-2025-5347

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS6.2AI score0.00424EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/30 3:15 p.m.12 views

CVE-2025-5347

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS0.00424EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/30 2:31 p.m.9 views

CVE-2025-5347 Stored XSS

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS5.8AI score0.00424EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/30 2:31 p.m.31 views

CVE-2025-5347

CVE-2025-5347 affects Zohocorp ManageEngine Exchange Reporter Plus before version 5723. The vulnerability is a Stored Cross-Site Scripting flaw in the reports module, allowing injected scripts to be stored on the server and executed when users view affected reports. According to the connected adv...

6.3CVSS5.8AI score0.00424EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/30 2:31 p.m.23 views

CVE-2025-5347 Stored XSS

Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module...

6.3CVSS0.00424EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.19 views

PT-2025-44414

Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions prior to 5723 Description ManageEngine Exchange Reporter Plus versions before 5723 are susceptible to Stored Cross Site Scripting within the reports module. This allows for the injection of maliciou...

6.3CVSS6.2AI score0.00424EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.10 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus prior to version 5723 that stems from a stored cross-site scripting vulnerability in the reporting module...

6.3CVSS5.9AI score0.00424EPSS
SaveExploits0References1
Circl
Circl
added 2025/06/06 8:51 a.m.28 views

CVE-2025-5723

creationtimestamp| type| source ---|---|--- 2025-06-06 08:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwhfj3be22p...

4.8CVSS7AI score0.00318EPSS
SaveExploits1References1
NVD
NVD
added 2025/06/06 5:15 a.m.34 views

CVE-2025-5723

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/academic/classes of the component Classes Page. The manipulation of the argument Class Name leads to cross site scripting...

4.8CVSS0.00318EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/06/06 5:00 a.m.37 views

CVE-2025-5723 SourceCodester Student Result Management System Classes Page classes cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/academic/classes of the component Classes Page. The manipulation of the argument Class Name leads to cross site scripting...

4.8CVSS0.00318EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/06 5:00 a.m.69 views

CVE-2025-5723

CVE-2025-5723 affects SourceCodester Student Result Management System 1.0. The vulnerability is a cross-site scripting (XSS) issue in the Classes Page, specifically through manipulation of the Class Name argument within /script/academic/classes. The impact is consistent with an attacker potential...

4.8CVSS6.3AI score0.00318EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/06 5:00 a.m.8 views

CVE-2025-5723 SourceCodester Student Result Management System Classes Page classes cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/academic/classes of the component Classes Page. The manipulation of the argument Class Name leads to cross site scripting...

4.8CVSS3.7AI score0.00318EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 4:32 a.m.9 views

CVE-2023-5723

An attacker with temporary script access to a site could have set a cookie containing invalid characters using document.cookie that could have led to unknown errors. This vulnerability affects Firefox 119...

5.3CVSS6AI score0.00693EPSS
SaveExploits0References1
Circl
Circl
added 2024/08/21 7:55 p.m.13 views

CVE-2024-5723

creationtimestamp| type| source ---|---|--- 2024-08-21 19:55:42+00:00| seen| https://t.me/cvedetector/3804...

8.8CVSS8.1AI score0.40669EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/21 4:14 p.m.21 views

CVE-2024-5723 Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateServiceHost...

8.8CVSS8.9AI score0.40669EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/21 4:14 p.m.73 views

CVE-2024-5723

Centreon updateServiceHost exposes a SQL Injection that leads to Remote Code Execution. The flaw occurs in updateServiceHost due to improper validation of a user-supplied string used to build SQL queries, allowing an attacker to run code in the apache user context after authentication is required...

8.8CVSS9.2AI score0.40669EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/07/15 9:59 p.m.12 views

CGA-H7C3-C7J8-5723

Bulletin has no description...

7.5CVSS7.1AI score0.01414EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/07/01 12:00 a.m.9 views

Debian: Security Advisory (DSA-5723-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00296EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.40 views

openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:4214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.01598EPSS
SaveExploits0References2
Rows per page
Query Builder