Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5004 matches found

attackerkb
attackerkb•added 2022/08/26 12:00 a.m.•10 views

CVE-2021-38934

IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.4CVSS5.9AI score0.00471EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•37 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

6CVSS8.5AI score0.03092EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•30 views

Cross site scripting

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

6.8CVSS8.6AI score0.03898EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•25 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this...

5.8CVSS6AI score0.83927EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•31 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.04448EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2022/08/22 6:27 p.m.•8 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6AI score0.03963EPSS
SaveExploits0References2
CVE
CVE•added 2022/08/22 6:27 p.m.•122 views

CVE-2022-32772

CVE-2022-32772 affects WWBN AVideo 11.6 and the dev master commit 3f7c0364. The vulnerability is a footer alerts XSS in the msg parameter, where insufficient sanitization allows crafted input to inject JavaScript. TALOS confirms multiple XSS variants via footer.php without proper sanitization, in...

9.6CVSS6.1AI score0.03963EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2022/08/22 6:27 p.m.•62 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score0.03963EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:27 p.m.•34 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score
SaveExploits0References4
Mend
Mend•added 2022/08/22 6:27 p.m.•5 views

CVE-2022-32771

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS0.04226EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2022/08/22 6:27 p.m.•54 views

CVE-2022-32771

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score0.04226EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:27 p.m.•33 views

CVE-2022-32771

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score
SaveExploits0References4
Mend
Mend•added 2022/08/22 6:27 p.m.•7 views

CVE-2022-32770

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS0.04448EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2022/08/22 6:24 p.m.•9 views

CVE-2022-30690

A cross-site scripting xss vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this...

9.6CVSS6AI score0.83927EPSS
SaveExploits1References2
OSV
OSV•added 2022/08/22 6:24 p.m.•31 views

CVE-2022-30690

A cross-site scripting xss vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this...

9.6CVSS6.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2022/08/22 6:22 p.m.•11 views

CVE-2022-28712

A cross-site scripting xss vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

9CVSS8.6AI score0.03092EPSS
SaveExploits1References2
Mend
Mend•added 2022/08/22 6:22 p.m.•3 views

CVE-2022-28712

A cross-site scripting xss vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

9.4CVSS0.03092EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment•added 2022/08/22 6:22 p.m.•10 views

CVE-2022-26842

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

9.6CVSS8.8AI score0.03898EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2022/08/22 6:22 p.m.•57 views

CVE-2022-26842

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

9.6CVSS8.9AI score0.03898EPSS
SaveExploits1References2
Mend
Mend•added 2022/08/22 6:22 p.m.•6 views

CVE-2022-26842

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

9.6CVSS0.03898EPSS
SaveExploits1References4
Rows per page
Query Builder