Lucene search
+L

1508 matches found

ATTACKERKB
ATTACKERKB
added 2022/06/30 6:15 p.m.2 views

CVE-2022-34791

Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.8AI score0.00606EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/30 6:15 p.m.14 views

CVE-2022-34791

Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.00606EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/30 6:15 p.m.7 views

CVE-2022-34791

Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.7AI score0.00606EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/30 5:47 p.m.277 views

CVE-2022-34791

CVE-2022-34791 affects the Jenkins Validating Email Parameter Plugin versions 1.10 and earlier . The vulnerability arises because the plugin does not escape the name and description of its parameter type, leading to a stored XSS vulnerability exploitable by attackers who have the Item/Configure p...

5.4CVSS5.4AI score0.00606EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/30 5:47 p.m.38 views

CVE-2022-34791

Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.7AI score0.00606EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.7 views

Jenkins Plugin Validating Email Parameter 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

5.4CVSS5.3AI score0.00606EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/06/30 12:0 a.m.11 views

PT-2022-22343 · Jenkins · Jenkins Validating Email Parameter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Validating Email Parameter Plugin versions 1.10 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This is due to the plugin not escaping the name and description of its parameter type...

8CVSS5.6AI score0.00606EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/05/17 12:20 a.m.24 views

MetalGenix GeniXCMS vulnerable to SQL Injection

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

9.8CVSS8.7AI score0.0376EPSS
SaveExploits4References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/05 8:15 p.m.4 views

CVE-2022-27123

Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter...

9.8CVSS6AI score0.01254EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/05 8:15 p.m.5 views

CVE-2022-27123

Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter...

9.8CVSS5.8AI score0.01254EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/05 8:15 p.m.19 views

Sql injection

Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS9.8AI score0.01254EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/03/26 12:0 a.m.51 views

GHSA-XGX2-332H-9X6Q SQL Injection in Yeswiki

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form. The issue was fixed in Yeswiki version 4.1.0...

7.5CVSS8AI score0.0139EPSS
SaveExploits1References4
NVD
NVD
added 2022/03/25 5:15 p.m.21 views

CVE-2021-43091

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form...

7.5CVSS0.0139EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/25 5:15 p.m.5 views

CVE-2021-43091

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form...

7.5CVSS7.2AI score0.0139EPSS
SaveExploits1References3
OSV
OSV
added 2022/03/25 5:15 p.m.16 views

CVE-2021-43091

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form...

7.5CVSS8AI score
SaveExploits0References2
Prion
Prion
added 2022/03/25 5:15 p.m.16 views

Sql injection

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form...

5CVSS8AI score0.0139EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/25 4:14 p.m.29 views

CVE-2021-43091

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form...

8.2AI score0.0139EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.7 views

YesWiki SQL注入漏洞

YesWiki is a wiki system written in PHP by the French organization YesWiki. It is used to create and manage websites in a collaborative way. A SQL injection vulnerability exists in Yes Wiki doryphore version 20211012, which originates from a SQL injection vulnerability in the email parameter of t...

7.5CVSS7.6AI score0.0139EPSS
SaveExploits1References3
zdt
zdt
added 2022/03/11 12:0 a.m.332 views

Employee Performance Evaluation v1.0 SQL injection Vulnerability

Title: Employee Performance Evaluation v1.0 SQLi Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/14617/employee-performance-evaluation-system-phpmysqli-source-code.html Reference:...

0.1AI score
SaveExploits0
NVD
NVD
added 2022/03/02 11:15 p.m.17 views

CVE-2022-26171

Bank Management System v1.o was discovered to contain a SQL injection vulnerability via the email parameter...

9.8CVSS0.01275EPSS
SaveExploits1References1
Rows per page
Query Builder