274 matches found
EUVD-2024-55032
Apache Geode web-api is vulnerable to Cross-site Scripting...
Cross-site Scripting
Overview Affected versions of this package are vulnerable to Cross-site Scripting via api exception. An attacker can trick the user into clicking a specially crafted link, potentially leading to code execution on the target page, theft of session information, and account takeover. Remediation...
Apache Geode web-api is vulnerable to Cross-site Scripting
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088
Apache Geode is vulnerable to a Cross-site Scripting (XSS) flaw in the web-api (REST) component. The vulnerability allows an attacker to trick a logged-in user into clicking a specially-crafted link, which executes malicious code on the returned page. This attack could result in the theft of sess...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
CVE-2024-44088 Apache Geode: Reflected XSS
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
PT-2025-41925
Name of the Vulnerable Software and Affected Versions Apache Geode versions prior to 1.15.2 Description A malicious script injection issue exists in the Apache Geode web-api REST. An attacker can trick a logged-in user into clicking a specially-crafted link, leading to code execution on the...
Apache Geode 安全漏洞
Apache Geode is a U.S.-based Apache Foundation suite of management platforms used in distributed cloud architectures to provide real-time and consistent access to data for data-intensive applications. A security vulnerability exists in Apache Geode versions prior to 1.15.2 that originates from we...
EUVD-2007-2444
Malware in sbrugna...
EUVD-2019-0553
Malware in sbrugna...
EUVD-2022-1987
Malicious code in bioql PyPI...
EUVD-2022-3891
Malicious code in bioql PyPI...
EUVD-2022-5475
Malicious code in bioql PyPI...
EUVD-2022-7000
Malicious code in bioql PyPI...
EUVD-2022-6906
Malicious code in bioql PyPI...
EUVD-2022-1223
Malicious code in bioql PyPI...