Lucene search
+L

10790 matches found

NVD
NVD
added 2024/03/13 2:15 p.m.21 views

CVE-2024-2247

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS8.4AI score0.00467EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/13 2:15 p.m.25 views

Cross site scripting

JFrog Artifactory versions below 7.77.7, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

6.8CVSS8.2AI score0.00467EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/13 2:06 p.m.16 views

CVE-2024-2247 JFrog Artifactory Cross-Site Scripting

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS6.3AI score0.00467EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/13 2:06 p.m.24 views

CVE-2024-2247 JFrog Artifactory Cross-Site Scripting

JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

8.8CVSS8.5AI score0.00467EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/13 2:06 p.m.84 views

CVE-2024-2247

JFrog Artifactory is affected by a DOM-based cross-site scripting vulnerability in versions prior to 7.77.7 and 7.82.1, caused by improper handling of the import override mechanism. Impact: potential cross-site scripting via the vulnerable import override path. Affected software is Artifactory (A...

8.8CVSS8.4AI score0.00467EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2024/03/13 1:59 a.m.70 views

Exploit for Cross-site Scripting in Html-Js Doracms

CVE-2024-28715 CVE ID CVE-2024-28715 PRODUCT Do...

8.8CVSS7.7AI score0.01071EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.9 views

JFrog Artifactory Cross-Site Scripting Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries, and provides an end-to-end automation solution for tracking artifacts from development to production. A cross-site scripting...

8.8CVSS6.1AI score0.00467EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.10 views

WordPress Plugin Beaver Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS6.8AI score0.00592EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.11 views

PT-2024-2430 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to inject malicious scripts into a webpage. When a victim browses to the page...

5.4CVSS6.3AI score0.0054EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/03/12 12:00 a.m.99 views

Adobe Experience Manager 6.5.0.0 < 6.5.20.0 Multiple Vulnerabilities (APSB24-05)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5.20.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-05 advisory. - Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS...

5.4CVSS6.6AI score0.00644EPSS
SaveExploits0References49
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.13 views

PT-2024-2936 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable web pages. When...

5.5CVSS6.1AI score0.00459EPSS
SaveExploits0References5
NVD
NVD
added 2024/03/09 7:15 a.m.17 views

CVE-2024-28089

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity who has access to the router admin panel to conduct a DOM-based stored XSS attack that can fetch remote resources. The payload is executed at index.htmladvancedlocation aka the Device Location page...

5.2CVSS6AI score0.00658EPSS
SaveExploits0References3
Prion
Prion
added 2024/03/09 7:15 a.m.24 views

Design/Logic Flaw

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity who has access to the router admin panel to conduct a DOM-based stored XSS attack that can fetch remote resources. The payload is executed at index.htmladvancedlocation aka the Device Location page...

6.1AI score0.00658EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/09 12:00 a.m.23 views

CVE-2024-28089

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity who has access to the router admin panel to conduct a DOM-based stored XSS attack that can fetch remote resources. The payload is executed at index.htmladvancedlocation aka the Device Location page...

6.2AI score0.00658EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/09 12:00 a.m.32 views

CVE-2024-28089

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity who has access to the router admin panel to conduct a DOM-based stored XSS attack that can fetch remote resources. The payload is executed at index.htmladvancedlocation aka the Device Location page...

6AI score0.00658EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/09 12:00 a.m.89 views

CVE-2024-28089

CVE-2024-28089 affects Hitron CODA-4582 2AHKM-CODA4589 (version 7.2.4.5.1b8). The vulnerability is a DOM-based stored XSS triggered on the Device Location page (index.html#advanced_location) that can be exploited by a remote attacker within Wi‑Fi proximity who has access to the router admin panel...

5.2CVSS6.1AI score0.00658EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/08 12:00 a.m.11 views

PT-2024-22257 · Hitron · Hitron Coda-4582

Name of the Vulnerable Software and Affected Versions: Hitron CODA-4582 2AHKM-CODA4589 version 7.2.4.5.1b8 Description: The issue allows a remote attacker within Wi-Fi proximity, who has access to the router admin panel, to conduct a DOM-based stored XSS attack. This attack can fetch remote...

5.2CVSS6.1AI score0.00658EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.21 views

Fedora: Security Advisory for jsoup (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.18 views

Fedora: Security Advisory for jtidy (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.15 views

Fedora: Security Advisory for xml-commons-apis (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
Rows per page
Query Builder