11953 matches found
Design/Logic Flaw
The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.6.0 and...
PT-2023-13992 · Tibco Software · Tibco Ebx Add-Ons
Name of the Vulnerable Software and Affected Versions: TIBCO EBX Add-ons versions 5.6.0 and below Description: The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected...
CVE-2022-41566
The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.6.0 and...
CVE-2022-41566
The CVE-2022-41566 issue affects the server component of TIBCO EBX Add-ons for versions 5.6.0 and below. The vulnerability enables a low-privileged, network-access attacker to perform stored XSS on the affected system, with confidentiality and integrity impacts reported as high in the CVSS metric...
CVE-2022-41566 TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability
The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.6.0 and...
CVE-2023-0945
A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...
CVE-2023-0945 SourceCodester Best POS Management System cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...
Best pos management system 跨站脚本漏洞
Best pos management system is a best pos management system by Mayuri K. Personal developer. A cross-site scripting vulnerability exists in Best POS Management System version 1.0, which originates from the presence of an unknown function in the file index.php?page=add-category, which can be...
PT-2023-16631 · Sourcecodester · Sourcecodester Best Pos Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file index.php?page=add-category. The manipulation of the Name argument with the input "...
CVE-2022-48320 CSRF in add-visual endpoint
Cross-site Request Forgery CSRF in Tribe29's Checkmk = 2.1.0p17, Checkmk = 2.0.0p31, and all versions of Checkmk 1.6.0 EOL allow an attacker to add new visual elements to multiple pages...
PT-2023-16618 · Unknown · Code-Projects Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: codeprojects Pharmacy Management System version 1.0 Description: A critical issue has been found in the Avatar Image Handler component of the file add.php, leading to unrestricted upload. The attack can be initiated remotely. The issue affect...
PYSEC-2023-10
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection...
TIBCO Security Advisory: February 22, 2023 - TIBCO EBXAdd-ons -CVE-2022-41566
TIBCO EBX Add-ons Cross Site Scripting XSS Vulnerability Original release date:February 22, 2023 Last revised: --- CVE-2022-41566 Source: TIBCO Software Inc. Products Affected TIBCO EBX Add-ons versions 5.6.0 and below The following component is affected: server Description The component listed...
CVE-2023-24369
A cross-site scripting XSS vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function...
CVE-2023-24769
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection...
Demanzo Matrimony 1.5 Cross Site Request Forgery
==================================================================================================================================== | Title : Demanzo Matrimony v.1.5 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 109.0.132-bit | |...
CVE-2023-24369
A cross-site scripting XSS vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function...
CVE-2023-24369
A cross-site scripting XSS vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function...
CVE-2022-26512
Uncontrolled search path element in the IntelR FPGA Add-on for IntelR oneAPI Base Toolkit before version 2022.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26512
Uncontrolled search path element in the IntelR FPGA Add-on for IntelR oneAPI Base Toolkit before version 2022.2 may allow an authenticated user to potentially enable escalation of privilege via local access...