Lucene search
+L

6158 matches found

CVE
CVE
•added 2021/04/02 8:40 p.m.•91 views

CVE-2021-30074

CVE-2021-30074 affects docsify 4.12.1 and earlier, with a Cross Site Scripting (XSS) vulnerability in the search component due to improper encoding of code blocks and mishandling of the quote character. The issue is documented across multiple sources (GHSA, Red Hat, OSV, CVE records) and confirms...

6.1CVSS6.1AI score0.00785EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/02 8:40 p.m.•39 views

CVE-2021-30074

docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...

6.3AI score0.00785EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/02 12:00 a.m.•4 views

CVE-2021-30074: Improper Neutralization of Input During Web Page Generation

docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...

6.1CVSS5.8AI score0.00785EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/04/02 12:00 a.m.•11 views

docsify 跨站脚本漏洞

docsify is a documentation website generator. A cross-site scripting vulnerability exists in docsify 4.12.1, which stems from the search component not properly coding code blocks and incorrectly handling "characters"...

6.1CVSS6AI score0.00785EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/03/26 12:00 a.m.•14 views

PT-2024-11108 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the f2fs file system in the Linux kernel. In CP disabling mode, there are two issues when using LFS or SSR | AT SSR mode to select a victim. The first issue is...

7.1CVSS6.7AI score0.00238EPSS
SaveExploits0References20
attackerkb
attackerkb
•added 2021/03/18 5:15 p.m.•7 views

CVE-2021-21383

Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content injection even though it is contained...

7.6CVSS6.1AI score0.00876EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/03/18 5:10 p.m.•49 views

CVE-2021-21383 XSS in Wiki.js

Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content injection even though it is contained...

7.6CVSS7.4AI score0.00876EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/18 12:00 a.m.•2 views

CVE-2021-21383: Improper Neutralization of Input During Web Page Generation

Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content injection even though it is contained...

7.6CVSS6AI score0.00876EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/01/22 12:00 a.m.•60 views

NVIDIA SHIELD TV Elevation of Privilege Vulnerability

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia, USA. A security vulnerability exists in NVIDIA SHIELD TV all versions prior to 8.2.2, which contains a vulnerability in the implementation of the RPMB command state that allows an attacker to write write-protected configuration...

6.8CVSS6.9AI score0.00381EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/01/20 12:00 a.m.•14 views

NVIDIA SHIELD TV 安全漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia, USA. A security vulnerability exists in NVIDIA SHIELD TV all versions prior to 8.2.2, which contains a vulnerability in the implementation of the RPMB command state that allows an attacker to write write-protected configuration...

6.8CVSS6.7AI score0.00381EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/05 3:15 p.m.•19 views

CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

5.4CVSS5.2AI score0.00661EPSS
SaveExploits1References2
OSV
OSV
•added 2021/01/05 3:15 p.m.•21 views

CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

5.4CVSS5.8AI score
SaveExploits0References2
Prion
Prion
•added 2021/01/05 3:15 p.m.•26 views

Cross site scripting

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

4.3CVSS5.1AI score0.00661EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/01/05 2:17 p.m.•29 views

CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

5.2AI score0.00661EPSS
SaveExploits1References2
CVE
CVE
•added 2021/01/05 2:17 p.m.•56 views

CVE-2020-26046

CVE-2020-26046 affects FUEL CMS 1.4.11. A stored cross-site scripting vulnerability exists in the Blocks/Navigation/Site variables, exploitable by an authenticated user and potentially impacting other visitors. Reported impact includes cookie stealing and other malicious actions. The available do...

5.4CVSS5.9AI score0.00661EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/05 12:00 a.m.•5 views

CVE-2020-26046: Improper Neutralization of Input During Web Page Generation

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

5.4CVSS5.7AI score0.00661EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/01/05 12:00 a.m.•14 views

FUEL CMS 跨站脚本漏洞

FUEL CMS is a content management system based on CodeIgniter. A stored cross-site scripting vulnerability exists in the Blocks/Navigation/Site variable in FUEL CMS 1.4.11. An attacker can exploit this vulnerability to steal cookies...

5.4CVSS5.9AI score0.00661EPSS
SaveExploits1References3
NVD
NVD
•added 2020/12/31 10:15 a.m.•39 views

CVE-2020-35864

An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. readscalar and readscalarat can transmute values without unsafe blocks...

7.5CVSS7.5AI score0.00591EPSS
SaveExploits1References1
OSV
OSV
•added 2020/12/31 10:15 a.m.•42 views

CVE-2020-35864

An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. readscalar and readscalarat can transmute values without unsafe blocks...

7.5CVSS7.2AI score
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2020/12/31 8:29 a.m.•106 views

CVE-2020-35864

An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. readscalar and readscalarat can transmute values without unsafe blocks...

7.5CVSS7.2AI score0.00591EPSS
SaveExploits1
Rows per page
Query Builder