CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

27 matches found

Prion•added 2018/09/05 2:29 p.m.•25 views

Cross site scripting

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

4.3CVSS5.8AI score0.01224EPSS

SaveExploits1References3Affected Software1

PyPA•added 2018/09/05 2:29 p.m.•13 views

PYSEC-2018-54

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

6.1CVSS6.2AI score0.01224EPSS

SaveExploits1References4Affected Software1

OSV•added 2018/09/05 2:29 p.m.•14 views

PYSEC-2018-54

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

6.1CVSS6.3AI score0.01224EPSS

SaveExploits1References4

Cvelist•added 2018/09/05 2:00 p.m.•42 views

CVE-2018-16516

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

5.8AI score0.01224EPSS

SaveExploits1References3

CVE•added 2018/09/05 2:00 p.m.•97 views

CVE-2018-16516

CVE-2018-16516 affects Flask-Admin up to version 1.5.2, where helpers.py is vulnerable to reflected XSS via a crafted URL. The root cause is improper escaping that allows attacker-supplied input to be reflected in the response. Exploitation details are not provided in the documents beyond this de...

6.1CVSS5.6AI score0.01224EPSS

SaveExploits1References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/09/05 12:00 a.m.•1 views

CVE-2018-16516: Improper Neutralization of Input During Web Page Generation

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

6.1CVSS6.3AI score0.01224EPSS

SaveExploits1References2

Veracode•added 2016/12/30 5:23 a.m.•11 views

Cross-Site Scripting (XSS)

flask-admin is vulnerable to cross-site scripting XSS attacks. This is because it does not escape html in columneditablelist values...

5.7AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by