Lucene search
+L

1346 matches found

NVD
NVD
added 2024/10/29 1:15 p.m.34 views

CVE-2024-49636

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...

7.1CVSS0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/29 12:49 p.m.26 views

CVE-2024-49636 WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...

7.1CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 12:49 p.m.65 views

CVE-2024-49636

CVE-2024-49636 concerns Agile Video Player Lite (WordPress plugin) with a Reflected XSS in versions

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/29 12:49 p.m.16 views

CVE-2024-49636 WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Prashant Mavinkurve Agile Video Player Lite allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through 1.0...

7.1CVSS7.2AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.10 views

WordPress plugin Agile Video Player Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 1:15 p.m.8 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

5.4CVSS5.8AI score0.003EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/28 1:15 p.m.18 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

5.4CVSS0.003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 12:55 p.m.16 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

4.6CVSS4.5AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/28 12:55 p.m.46 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

4.6CVSS0.003EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/28 12:55 p.m.89 views

CVE-2024-50578

Summary: CVE-2024-50578 affects JetBrains YouTrack prior to 2024.3.47707, where a stored XSS vulnerability exists in the Agile Boards page triggered by a sprint value. Impact (as described): cross-site scripting could be exploited via the Agile Boards sprint field, enabling attacker-controlled co...

5.4CVSS6AI score0.003EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.11 views

PT-2024-7635 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47707 Description: The issue is related to a stored XSS vulnerability in the Agile Boards page of JetBrains YouTrack. This vulnerability can be exploited by an attacker to conduct cross-site scripti...

5.5CVSS5.5AI score0.003EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/10/21 7:44 a.m.8 views

WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Agile Video Player Lite versions = 1.0...

7.1CVSS6.1AI score0.00331EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/21 12:00 a.m.15 views

WordPress Agile Video Player Lite Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Agile Video Player Lite Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49636 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 267bc8c567b6 Credits João Pedro S Alcântara Kinor...

7.1CVSS6.6AI score0.00331EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:47 p.m.10 views

Malicious code in agile_cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Qualys Blog
Qualys Blog
added 2024/06/20 11:06 a.m.25 views

Secure Your Containerized Environments with Qualys Containerized Scanner Appliance (QCSA)

IT has undergone a series of significant shifts over the years, from physical infrastructure to virtual, and how infrastructure was managed and maintained. This shift led IT through the digital transformation era, introducing various types of clouds and “As-a-Service” models. Although...

7AI score
SaveExploits0
NVD
NVD
added 2024/06/17 9:15 p.m.31 views

CVE-2024-37828

A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...

4.8CVSS0.00245EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/17 12:00 a.m.15 views

VERMEG Agile Reporter Security Breach

VERMEG Agile Reporter is a hybrid of pre-packaged modules from VERMEG, Inc. A security vulnerability exists in VERMEG Agile Reporter version v23.2.1, which stems from the presence of stored cross-site scripting XSS that allows an attacker to inject a crafted payload to execute arbitrary web scrip...

4.8CVSS5.8AI score0.00245EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/06/17 12:00 a.m.17 views

CVE-2024-37828

A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...

5.9AI score0.00245EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/17 12:00 a.m.79 views

CVE-2024-37828

CVE-2024-37828 describes a stored cross-site scripting (XSS) vulnerability in Vermeg Agile Reporter v23.2.1. The issue allows an attacker to inject crafted scripts/HTML into the Message field of the Set Broadcast Message module, potentially enabling script execution in a victim’s browser and mani...

4.8CVSS5.8AI score0.00245EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/06/17 12:00 a.m.34 views

CVE-2024-37828

A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...

0.00245EPSS
SaveExploits0References2
Rows per page
Query Builder