Lucene search
+L

149 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.10 views

The vulnerability of the DataTables table processing plugin, related to the lack of protection for website structure, allows attackers to compromise data integrity.

The vulnerability of the DataTables table processing plugin is related to incorrect handling of arrays in the input data. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

6.1CVSS5.9AI score0.01975EPSS
SaveExploits1References10Affected Software3
Typo3
Typo3
added 2022/02/15 12:0 a.m.69 views

Cross-Site Scripting in extension "Bookdatabase" (extbookdatabase)

The extension bundles a vulnerable version of the 3rd party JavaScript component “Datatables” which was known to be vulnerable against Cross-Site Scripting...

4.3CVSS3.2AI score0.01975EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2022/01/26 12:0 a.m.36 views

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial SQL Injection Vulnerability

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial is an open source project to help people learn how to build or develop a PHP CRUD without refresh/reload using Ajax and DataTables. sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial i...

9.6CVSS3.8AI score0.02181EPSS
SaveExploits1References1
NVD
NVD
added 2022/01/24 4:15 p.m.22 views

CVE-2021-40909

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

9.6CVSS0.02181EPSS
SaveExploits1References1
Prion
Prion
added 2022/01/24 4:15 p.m.19 views

Cross site scripting

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

6.8CVSS8.5AI score0.02181EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/01/24 3:15 p.m.60 views

CVE-2021-40909

CVE-2021-40909 is an XSS vulnerability in the sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23. The issue allows remote attackers to cause arbitrary code execution through the parameters first_name , last_name , and email sent to /ajax_crud . Publi...

9.6CVSS8.7AI score0.02181EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.12 views

WordPress 插件路径遍历漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. True Ranker plugin is a WordPress open source application plugin. WordPress True Ranker plugin has a path traversal...

7.5CVSS5.8AI score0.77944EPSS
SaveExploits5References6
BDU FSTEC
BDU FSTEC
added 2021/11/12 12:0 a.m.19 views

The vulnerability of the datatables.net package’s DataTables library allows a hacker to execute arbitrary code or cause a denial-of-service attack.

The vulnerability of the datatables.net package’s DataTables library is related to insufficient control over modifications to dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

7.5CVSS7AI score0.0367EPSS
SaveExploits2References10Affected Software3
vulnersOsv
vulnersOsv
added 2021/09/29 5:11 p.m.6 views

@christianhugo/cli (>=0.7.2-beta.6 <=0.7.3-beta.15), @christianhugo/mobile-builder (>=0.7.2-beta.6 <=0.7.4-beta.9) +72 more potentially affected by CVE-2021-23445 via datatables.net (>=1.10.12 <=1.10.25)

datatables.net NPM version =1.10.12, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.6.4-beta.10, =0.7.2-beta.7, =0.6.4-beta.10, =0.6.4-beta.10, =1.0.0, =1.0.0, =3.0.0, =3.0.11 and more Source cves: CVE-2021-23445 Source advisory: OSV:GHSA-H73Q-5WMJ-Q8PJ...

6.1CVSS6.2AI score0.01975EPSS
SaveExploits1
Veracode
Veracode
added 2021/09/28 6:5 a.m.5 views

Cross-site Scripting (XSS)

datatables.net is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script as it does not sanitize an array passed to the HTML escape entities function...

6.1CVSS6.2AI score0.01975EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/09/27 5:15 p.m.9 views

AZL-66567 CVE-2021-23445 affecting package reaper 3.1.1-22

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...

6.1CVSS6.3AI score0.01975EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/09/27 4:35 p.m.28 views

CVE-2021-23445 Cross-site Scripting (XSS)

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...

3.1CVSS6.7AI score0.01975EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/09/27 12:0 a.m.4 views

Sprymedia Datatables 跨站脚本漏洞

Sprymedia Datatables is a Javascript-based plugin from Sprymedia UK that supports efficient presentation of data on Html pages. A cross-site scripting vulnerability exists in Datatables versions prior to 1.11.3, which stems from the fact that if an array is passed to an HTML escape entity functio...

6.1CVSS5.5AI score0.01975EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2021/08/12 12:0 a.m.9 views

PT-2021-6499

Name of the Vulnerable Software and Affected Versions datatables.net versions prior to 1.11.3 Description The issue is related to the incorrect handling of an array in the input data by the DataTables plugin, which can allow a remote attacker to compromise data integrity. If an array is passed to...

6.1CVSS5.7AI score0.01975EPSS
SaveExploits1References29
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.8 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DataTables library is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.01407EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.9 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of DataTables libraries is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.8CVSS7.9AI score0.01407EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.6 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DataTables library is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.01407EPSS
SaveExploits1References5
CNVD
CNVD
added 2021/04/14 12:0 a.m.29 views

WordPress Sprymedia DataTables SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...

6.5CVSS7.6AI score0.01341EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.10 views

WordPress和Sprymedia DataTables SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...

6.5CVSS6AI score0.01341EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2020/12/16 12:0 a.m.8 views

Sprymedia Datatables Input Validation Error Vulnerability

Sprymedia Datatables is a Javascript-based plug-in from Sprymedia UK that supports efficient data presentation on Html pages. A security vulnerability exists in Sprymedia Datatables that stems from the fact that all versions of the package datatables.net are susceptible to prototype contamination...

7.5CVSS6.7AI score0.0367EPSS
SaveExploits2References12
Rows per page
Query Builder