Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/12/30 11:15 p.m.2 views

CVE-2025-68504

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through = 3.5.16...

6.5CVSS5.9AI score0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/30 12:32 a.m.2 views

EUVD-2025-205655

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch allows DOM-Based XSS.This issue affects JetSearch: from n/a through 3.5.16...

6.5CVSS5.9AI score0.00024EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.2 views

PT-2025-53796

Name of the Vulnerable Software and Affected Versions Crocoblock JetSearch versions through 3.5.16 Description A flaw exists in Crocoblock JetSearch that allows for DOM-Based Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...

6.5CVSS6AI score0.00024EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.3 views

CVE-2025-49931

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through = 3.5.10...

9.3CVSS5.9AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.3 views

EUVD-2025-35527

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CrocoBlock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through = 3.5.10...

7.1AI score0.00034EPSS
Exploits0References2
NVD
NVD
added 2025/10/22 3:15 p.m.1 views

CVE-2025-49930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through = 3.5.10...

7.1CVSS0.00075EPSS
Exploits0References1
NVD
NVD
added 2025/10/22 3:15 p.m.3 views

CVE-2025-49931

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through = 3.5.10...

9.3CVSS0.00034EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.2 views

PT-2025-43195

Name of the Vulnerable Software and Affected Versions CrocoBlock JetSearch versions through 3.5.10 Description A flaw exists in CrocoBlock JetSearch that allows for Blind SQL Injection due to improper neutralization of special elements used in SQL commands. This issue could potentially allow an...

9.3CVSS7.5AI score0.00034EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.1 views

PT-2025-43194

Name of the Vulnerable Software and Affected Versions CrocoBlock JetSearch versions through 3.5.10 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to...

7.1CVSS5.8AI score0.00075EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-21684

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00143EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 10:59 a.m.2 views

CVE-2025-53996

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows Stored XSS.This issue affects JetSearch: from n/a through = 3.5.10.1...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References1
NVD
NVD
added 2025/07/16 11:15 a.m.2 views

CVE-2025-53996

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows Stored XSS.This issue affects JetSearch: from n/a through = 3.5.10.1...

6.5CVSS0.00143EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/16 12:0 a.m.0 views

PT-2025-29740 · Crocoblock · Crocoblock Jetsearch

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSearch versions through 3.5.10.1 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation...

6.5CVSS4.9AI score0.00143EPSS
Exploits0References4
Rows per page
Query Builder