Lucene search
+L

21 matches found

RedhatCVE
RedhatCVE
•added 2026/03/06 7:53 a.m.•15 views

CVE-2026-28130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through = 4.14.0...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/05 6:16 a.m.•16 views

CVE-2026-28130

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through = 4.14.0...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•3 views

CVE-2026-28130: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through = 4.14.0...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/09 4:18 p.m.•18 views

CVE-2025-63062

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.5CVSS0.00543EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•1 views

CVE-2025-63062: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign Core: from n/a through = 4.14.0...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/07 5:32 p.m.•10 views

CVE-2025-62051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS6.4AI score0.00203EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•2 views

CVE-2025-62051: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS5.8AI score0.00203EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•15 views

PT-2025-45314

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through = 4.14.1...

6.5CVSS6.4AI score0.00203EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/23 3:13 p.m.•14 views

CVE-2025-53234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through = 4.14.0...

7.1CVSS6.4AI score0.0025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/23 3:13 p.m.•11 views

CVE-2025-53236

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

6.3CVSS7AI score0.00241EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•12 views

EUVD-2025-35470

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through = 4.14.0...

5.9AI score0.0025EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:15 p.m.•13 views

CVE-2025-53234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through = 4.14.0...

7.1CVSS0.0025EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/22 3:15 p.m.•13 views

CVE-2025-53236

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

6.3CVSS0.00241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•0 views

CVE-2025-53234: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through = 4.14.0...

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•14 views

PT-2025-43253

Name of the Vulnerable Software and Affected Versions AndonDesign UDesign Core versions through 4.14.0 Description An issue exists in AndonDesign UDesign Core u-design-core related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows...

6.3CVSS6.6AI score0.00241EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•1 views

CVE-2025-53236: Missing Authorization

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

6.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•4 views

CVE-2025-24757: Missing Authorization

Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through = 4.11.2...

5.3CVSS5.8AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:05 a.m.•18 views

CVE-2024-4077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

7.1CVSS5.2AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/25 10:15 a.m.•26 views

CVE-2024-4077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•2 views

CVE-2024-4077: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References2
Rows per page
Query Builder