Lucene search
+L

20427 matches found

OSV
OSV
added 2025/06/10 11:15 p.m.8 views

CVE-2025-46914

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00291EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.10 views

CVE-2025-46909

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00317EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.8 views

CVE-2025-46908

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.7AI score0.00317EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.6 views

CVE-2025-46902

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00317EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.8 views

CVE-2025-46899

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.7AI score0.00291EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.6 views

CVE-2025-46885

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.7AI score0.00291EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.4 views

CVE-2025-46878

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.7 views

CVE-2025-46877

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.8 views

CVE-2025-46861

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.5 views

CVE-2025-46855

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00299EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.4 views

CVE-2025-46846

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.7 views

CVE-2025-46838

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00299EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 8:15 p.m.9 views

CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS via the form field "Observaces" observances in the "Pessoas" persons section when creating or editing either a legal or a natural person...

6.1CVSS5.8AI score0.0024EPSS
SaveExploits2References2
OSV
OSV
added 2025/06/10 8:15 p.m.11 views

CVE-2024-41505

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the "Pessoas" persons section via the field "Profisso" professor...

6.1CVSS5.8AI score0.0024EPSS
SaveExploits2References2
OSV
OSV
added 2025/06/10 8:15 p.m.7 views

CVE-2024-41503

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS in the field "Ttulo" title inside the filter Save option in the "Busca" search function...

6.1CVSS5.8AI score0.0024EPSS
SaveExploits1References2
NVD
NVD
added 2025/06/10 8:15 p.m.31 views

CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS via the form field "Observaces" observances in the "Pessoas" persons section when creating or editing either a legal or a natural person...

6.1CVSS0.0024EPSS
SaveExploits2References1
NVD
NVD
added 2025/06/10 3:15 p.m.16 views

CVE-2025-26395

SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting XSS vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required...

7.1CVSS0.002EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/10 3:15 p.m.8 views

CVE-2025-26395

SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting XSS vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required...

4.3CVSS5.7AI score0.002EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/10 2:41 p.m.35 views

CVE-2025-26395 SolarWinds SWOSH DOM-based reflective XSS Vulnerability

SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting XSS vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required...

7.1CVSS0.002EPSS
SaveExploits0References2
NVD
NVD
added 2025/06/10 12:15 p.m.15 views

CVE-2025-43698

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025...

9.1CVSS0.00482EPSS
SaveExploits0References1
Rows per page
Query Builder