Lucene search
+L

3005 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 8:25 p.m.9 views

CVE-2002-1868

Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields...

10CVSS8.1AI score0.0544EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/15 9:14 p.m.10 views

CVE-2025-30314

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

6.1CVSS5.3AI score0.0029EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.8 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of Adobe Connect web conferencing software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS by injecting malicious scripts into form fields...

9.4CVSS5.2AI score0.00406EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/05/13 9:16 p.m.6 views

CVE-2025-43567

Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containin...

9.3CVSS5.7AI score0.00406EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/13 9:16 p.m.13 views

CVE-2025-30316

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS5.7AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/13 9:16 p.m.10 views

CVE-2025-30315

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

6.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/13 9:16 p.m.17 views

CVE-2025-30316

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

5.4CVSS0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.6 views

PT-2025-21041 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.8 and earlier Description: A stored Cross-Site Scripting XSS vulnerability affects Adobe Connect, allowing an attacker to inject malicious scripts into vulnerable form fields. When a victim accesses the page containi...

6.4CVSS5.4AI score0.0029EPSS
SaveExploits0References7
OSV
OSV
added 2025/04/14 12:15 p.m.6 views

CVE-2024-13598

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS Cross-site Scripting attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run th...

6.1CVSS5.8AI score0.0023EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/04/14 12:5 p.m.9 views

CVE-2024-13598 XSS in iKSORIS

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS Cross-site Scripting attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run th...

5.1CVSS5.9AI score0.0023EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/08 6:15 p.m.4 views

CVE-2025-27205

Adobe Experience Manager Screens versions FP11.3 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when...

5.4CVSS5.8AI score0.00439EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/27 12:0 a.m.30 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-06304)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/19 5:15 p.m.6 views

CVE-2024-53970

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00274EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/07 12:0 a.m.23 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-06308)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.2AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.6 views

WordPress plugin Lenix Elementor Leads 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

7.2CVSS8.7AI score0.00425EPSS
SaveExploits1References4
NVD
NVD
added 2025/02/19 6:15 p.m.13 views

CVE-2024-53974

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS0.00262EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/17 12:0 a.m.15 views

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2025-05696)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce, which can be exploited by an attacker to inject malicious script into vulnerable form...

8.7CVSS6.2AI score0.00679EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/17 12:0 a.m.12 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-04681)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.7AI score0.00384EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/17 12:0 a.m.9 views

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2025-05707)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce, which can be exploited by an attacker to inject malicious script into vulnerable form...

8.7CVSS6.2AI score0.00679EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/17 12:0 a.m.32 views

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2025-05697)

Adobe Commerce is the United States of America Odobie Adobe company of a kind for merchants and brands of the world's leading digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce, which can be exploited by an attacker to inject malicious script into vulnerable...

8.7CVSS6.2AI score0.00679EPSS
SaveExploits0References1
Rows per page
Query Builder