20187 matches found
ALPINE-CVE-2024-39926
An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...
CVE-2024-39926
An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...
CVE-2024-39926
An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...
CVE-2024-39926
An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...
CVE-2024-39926
A stored cross-site scripting (XSS) or HTML injection vulnerability exists in the admin dashboard of Vaultwarden (formerly Bitwarden_RS) version 1.30.3 . This flaw allows an authenticated attacker to inject malicious code into the dashboard, which may be executed or rendered within an administrat...
CVE-2024-39926
An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...
CVE-2024-39926: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...
CVE-2024-6702
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage...
CVE-2024-6702
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage...
CVE-2024-6702
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage...
CVE-2024-6702
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage...
CVE-2024-6702
CVE-2024-6702 affects Pega Platform versions 8.1 to 24.1.2, describing an HTML Injection issue in Stage. The connected PT- security entry confirms the vulnerability involves HTML Injection in Stage and notes there is no available information about a fix in a newer version. Other sources (NVD/Red ...
PT-2024-37809 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 8.1 to 24.1.2 Description: The issue is an HTML Injection problem involving Stage. Recommendations: For Pega Platform versions 8.1 to 24.1.2, at the moment, there is no information about a newer version that contains a...
CVE-2024-6702: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage...
HTML Injection
JupyterLite-core is vulnerable to HTML Injection. The vulnerability is due to insufficient validation of Markdown content, allowing a malicious notebook or file to access data and perform actions in the JupyterLite environment...
CVE-2024-42020
A Cross-site-scripting XSS vulnerability exists in the Reporter Widgets that allows HTML injection...
CVE-2024-42020
A Cross-site-scripting XSS vulnerability exists in the Reporter Widgets that allows HTML injection...
CVE-2024-42020
CVE-2024-42020 is an XSS in Veeam ONE Reporter Widgets that allows HTML injection. Affected product appears to be Veeam ONE 12.x (Reporter Widgets in 12.1.0.3208 and earlier). The root cause is improper handling of widget content enabling HTML/Script execution within the UI. Impact details in sou...