Lucene search
K

64 matches found

RedhatCVE
RedhatCVE
added 2025/12/05 6:34 p.m.5 views

CVE-2025-14013

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS5.4AI score0.00032EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/04 9:31 p.m.2 views

EUVD-2025-201262

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS5AI score0.00032EPSS
Exploits1References5
NVD
NVD
added 2025/12/04 7:16 p.m.1 views

CVE-2025-14013

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS0.00032EPSS
Exploits1References4
CVE
CVE
added 2025/12/04 6:2 p.m.5 views

CVE-2025-14013

The CVE-2025-14013 entry affects JIZHICMS up to version 2.5.5, specifically the Comment Handler’s file /index.php/admins/Comment/addcomment.html. The issue is a cross-site scripting vulnerability caused by manipulation of the body parameter, with remote initiation possible and a public exploit av...

4.8CVSS3.1AI score0.00032EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/12/04 6:2 p.m.21 views

CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS0.00032EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/04 6:2 p.m.3 views

CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS5.2AI score0.00032EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-16564

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00076EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51038

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00091EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-58700

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.00081EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-28919

Malicious code in bioql PyPI...

5.1CVSS4.8AI score0.00042EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-12458

Malicious code in bioql PyPI...

5.1CVSS4.8AI score0.00197EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-12365

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00401EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-57370

Malicious code in bioql PyPI...

4.8CVSS4.7AI score0.00102EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-32262

Malicious code in bioql PyPI...

4CVSS4.8AI score0.00075EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-51745

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00162EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/13 4:33 p.m.5 views

CVE-2025-10255

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the file /Products/Projects/Messages.aspx of the component Comment Handler. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit h...

5.1CVSS5.6AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2025/09/11 4:15 p.m.5 views

CVE-2025-10255

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the file /Products/Projects/Messages.aspx of the component Comment Handler. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit h...

5.1CVSS0.00042EPSS
Exploits0References4
CVE
CVE
added 2025/09/11 4:2 p.m.9 views

CVE-2025-10255

CVE-2025-10255 affects Ascensio System SIA OnlyOffice up to version 12.7.0. The issue is tied to an unknown function in the file /Products/Projects/Messages.aspx within the Comment Handler component, which can enable remote cross-site scripting via manipulation. Public exploit details exist, and ...

5.1CVSS5.3AI score0.00042EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/11 4:2 p.m.9 views

CVE-2025-10255 Ascensio System SIA OnlyOffice Comment Messages.aspx cross site scripting

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the file /Products/Projects/Messages.aspx of the component Comment Handler. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit h...

5.1CVSS0.00042EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/09/11 12:0 a.m.3 views

Ascensio System ONLYOFFICE 安全漏洞

Ascensio System ONLYOFFICE is an office software from Ascensio System, Latvia. A security vulnerability exists in Ascensio System ONLYOFFICE version 12.7.0 and earlier, which stems from an incorrect manipulation of the component Comment Handler in the file /Products/Projects/Messages.aspx, which...

5.1CVSS4.3AI score0.00042EPSS
Exploits0References5
Rows per page
Query Builder