Lucene search
+L

965 matches found

Veracode
Veracode
added 2025/03/12 5:43 a.m.20 views

Reflected Cross-Site Scripting (Reflected XSS)

laravel/framework is vulnerable to Reflected Cross-Site Scripting Reflected XSS. The vulnerability is due to improper encoding of route parameters in the debug-mode error page, allows an attacker to inject and execute malicious scripts in a victim’s browser by tricking them into visiting a...

8CVSS6.2AI score0.00521EPSS
SaveExploits1References8Affected Software1
CNNVD
CNNVD
added 2025/03/12 12:00 a.m.9 views

OpenText Service Management Automation X 安全漏洞

OpenText Service Management Automation X is advanced service management made easy by OpenText Canada. Based on embedded machine learning and analytics, it provides a smarter approach to IT Service Management ITSM, IT Asset Management ITAM and Enterprise Service Management ESM. A security...

2.1CVSS6.4AI score0.00314EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/03/10 10:41 p.m.6 views

Cross-site Scripting (XSS)

Overview laravel/framework is a PHP framework for web artisans. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper encoding of request parameters in the debug-mode error page. When the application runs with APPDEBUG=true and encounters an error, the...

8CVSS5.5AI score0.00588EPSS
SaveExploits1References2
OSV
OSV
added 2025/03/10 12:30 p.m.18 views

GHSA-83WP-F5C3-HQQR Laravel framework susceptible to reflected cross-site scripting

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page...

4.7CVSS7.4AI score0.00521EPSS
SaveExploits1References8
OSV
OSV
added 2025/03/10 12:30 p.m.65 views

GHSA-546H-56QP-8JMW Laravel framework susceptible to reflected cross-site scripting

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page...

4.7CVSS7.4AI score0.00588EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2025/03/10 12:30 p.m.39 views

Laravel framework susceptible to reflected cross-site scripting

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page...

8CVSS6.4AI score0.00588EPSS
SaveExploits1References8Affected Software1
NVD
NVD
added 2025/03/10 10:15 a.m.25 views

CVE-2024-13919

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page...

8CVSS0.00521EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/03/10 10:03 a.m.31 views

CVE-2024-13919 Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page...

8CVSS0.00521EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/03/10 10:03 a.m.10 views

CVE-2024-13919 Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page...

8CVSS6.4AI score0.00521EPSS
SaveExploits1References3
OSV
OSV
added 2025/03/10 10:03 a.m.14 views

CVE-2024-13919 Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page...

8CVSS7AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/03/10 10:03 a.m.14 views

CVE-2024-13919

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page...

8CVSS4.9AI score0.00521EPSS
SaveExploits1
CVE
CVE
added 2025/03/10 10:03 a.m.201 views

CVE-2024-13919

The CVE-2024-13919 entry concerns Laravel framework versions 11.9.0 to 11.35.1, which are vulnerable to reflected cross-site scripting due to improper encoding of route parameters on the debug-mode error page. Affected component: Laravel routing/debug-mode error page handling. Root cause (as stat...

8CVSS6.4AI score0.00521EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2025/03/10 10:02 a.m.144 views

CVE-2024-13918

CVE-2024-13918 (Laravel) affects Laravel framework versions 11.9.0 through 11.35.1, where a reflected cross-site scripting vulnerability arises from improper encoding of request parameters in the debug-mode error page. The root cause is the failure to encoding user input on the debug error page, ...

8CVSS6.4AI score0.00588EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/03/10 10:02 a.m.21 views

CVE-2024-13918 Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page...

8CVSS7AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/03/10 10:02 a.m.73 views

CVE-2024-13918

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page...

8CVSS4.8AI score0.00588EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/03/10 10:02 a.m.50 views

CVE-2024-13918 Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page...

8CVSS0.00588EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/03/10 10:02 a.m.11 views

CVE-2024-13918 Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page...

8CVSS6.4AI score0.00588EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/03/10 12:00 a.m.16 views

PT-2025-10571 · Laravel +1 · Laravel +1

Name of the Vulnerable Software and Affected Versions: Laravel framework versions 11.9.0 through 11.35.1 Description: The Laravel framework is susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. This issue allows an attacke...

8CVSS5.2AI score0.00588EPSS
SaveExploits1References39
CNNVD
CNNVD
added 2025/03/10 12:00 a.m.15 views

Laravel Framework 跨站脚本漏洞

Laravel Framework is a PHP-based web application development framework from the individual developer Taylor Otwell. A security vulnerability exists in Laravel Framework versions 11.9.0 through 11.35.1, which stems from improper coding of request parameters on a debug mode error page and could lea...

8CVSS6AI score0.00588EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-47882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in Something went wrong! error page includes the exception...

6.1CVSS6.5AI score0.00481EPSS
SaveExploits1References2
Rows per page
Query Builder