964 matches found
CVE-2022-3175 Missing Custom Error Page in ikus060/rdiffweb
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
Rdiffweb 安全漏洞
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.4.2, which stems from the loss of a custom error page...
Error page is default and leak error information
Description Information is leak in error page and this can support for other vulnerabilities. Proof of Concept Whenever trying to input anything meaningless after the link https://rdiffweb-demo.ikus-soft.com/ the error page will appear. Example: https://rdiffweb-demo.ikus-soft.com/...
Dell Wyse Management Suite 安全漏洞
Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, Inc. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery.Wyse Management Suite 3.6.1 and prior versions contain a security vulnerability that...
Mozilla Firefox 代码问题漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from a code issue vulnerability that originates when an application configures a PAC URL and is unable to access the server hosting the PAC, OCSP requests are blocked, and the application displays a...
Malicious Package
Overview website-404-error-page is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
CVE-2022-31734
Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.250SY...
CVE-2022-31734
Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.250SY...
Cross site scripting
Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.250SY...
Cisco Catalyst 2940 Series Cross-Site Scripting Vulnerability
Cisco Catalyst is a series of switches from Cisco, Inc. A cross-site scripting vulnerability exists in the Cisco Catalyst 2940 Series, which stems from a failure to properly process user input and generate an error page that could be exploited by an attacker to execute arbitrary scripts on the we...
Cisco Catalyst 跨站脚本漏洞
Cisco Catalyst is a series of switches from Cisco, Inc. A cross-site scripting vulnerability exists in the Cisco Catalyst 2940 Series, which stems from a failure to properly process user input and generate an error page that could be exploited by an attacker to execute arbitrary scripts on the we...
Cross-site Scripting (XSS)
dolibarr/dolibarr is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script as it does not handle SQL error page properly...
GHSA-F2G5-426F-353Q Cross-site Scripting in Dolibarr
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
Cross site scripting
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
Dolibarr 12.0.5 is vulnerable to Cross Site Scripting XSS via Sql Error Page...
CVE-2022-30875
CVE-2022-30875 affects Dolibarr 12.0.5 and is described as a Cross-Site Scripting (XSS) vulnerability exploitable via the SQL Error Page. The connected records reiterate the same issue across multiple repositories (Red Hat, OSV, CNVD, GHSA, etc.) but do not provide concrete technical details beyo...