CVE-2023-36163

The CVE-2023-36163 entry documents a Cross-Site Scripting (XSS) vulnerability in IP-DOT BuildaGate v.BuildaGate5. The issue is exploitable via a crafted script injected into the URL parameter mc , enabling a remote attacker to execute arbitrary code. Public PoC details exist (ExploitDB) showing t...

IP-DOT BuildaGate 跨站脚本漏洞

IP-DOT BuildaGate is an application from IP-DOT, Inc. IP-DOT BuildaGate 5 suffers from a cross-site scripting vulnerability that originates from allowing a remote attacker to execute arbitrary code via a crafted script...

CVE-2023-36163

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...

CVE-2023-36163

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL...

PT-2023-25467 · Avg · Avg Anti-Spyware

Name of the Vulnerable Software and Affected Versions: AVG Anti-Spyware version 7.5 Description: An issue in AVG Anti-Spyware allows an attacker to execute arbitrary code via a crafted script to the guard.exe component. Recommendations: For AVG Anti-Spyware version 7.5, consider updating to a new...

CVE-2023-25201

Cross Site Request Forgery CSRF vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows a remote attacker to execute arbitrary code via a crafted script upload...

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

Design/Logic Flaw

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

CVE-2023-36201

Removed by vendor...

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

PT-2023-25479 · Jerryscriptproject · Jerryscript

Name of the Vulnerable Software and Affected Versions: JerryscriptProject jerryscript version 3.0.0 Description: An issue in JerryscriptProject jerryscript allows an attacker to obtain sensitive information via a crafted script to the arrays. Recommendations: For version 3.0.0, consider restricti...

CVE-2023-34192

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function...

Cross site scripting

Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function...

Oracle Linux 8 : sqlite (ELSA-2023-3840)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3840 advisory. - Bumped release to add correct changelog entry. Version 3.26.0-18 fixes CVE-2020-24736 Tenable has extracted the preceding description block directly from the...

CVE-2023-34836

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters...

Cross site scripting

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters...

Cross site scripting

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...