15712 matches found
CVE-2024-3801
Sites managed in S@M CMS Concept Intermedia might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...
CVE-2024-3801
CVE-2024-3801 affects S@M CMS (Concept Intermedia); vulnerability is Reflected XSS triggered by including scripts in one of GET header parameters. The description notes that only a subset of observed services is vulnerable and that the vendor has not investigated the root cause, so it is unclear ...
Concept Intermedia S@M CMS Security Vulnerability
Concept Intermedia S@M CMS is a content management system from Concept Intermedia, Inc. A security vulnerability exists in Concept Intermedia S@M CMS version 3.3 and earlier, which stems from the inclusion of script in the parameters of a request via GET, resulting in a reflected cross-site...
PT-2024-27875 · Concept Intermedia · S@M Cms
Name of the Vulnerable Software and Affected Versions: S@M CMS Concept Intermedia affected versions not specified Description: The issue concerns a Reflected XSS vulnerability that can be exploited by including scripts in one of the GET header parameters. It is noted that only a part of the...
Cross Site Request Forgery (CSRF)
silverstripe/graphql is vulnerable to Cross Site Request Forgery CSRF. The vulnerability is due to the lack of CSRF protection, allowing authenticated users to unwittingly trigger GET requests that can modify or delete data on the server...
CVE-2024-23766
CVE-2024-23766 affects HMS Anybus X-Gateway AB7832-F (3 devices) where an unauthenticated GET request to a specific URL on port 80 can reboot the gateway or many modules, enabling DoS via repeated requests. Documented impact is availability loss (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; bas...
CVE-2024-23766
An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway or at least most of its modules. An attacker can use this feature to carry out a denial of...
Malicious code in get-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6931 Malicious code in get-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in request-get (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5883 Malicious code in request-get (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5176 Malicious code in get-latency (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in get-latency (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_q7yl (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_p6x7p (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_ksurr (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_juver (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_gi3n9 (npm)
--- -= Per source details. Do not edit below this line.=-...