5762 matches found
CVE-2023-38045 Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...
Admiror Gallery Cross-Site Scripting Vulnerability
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Admiror Gallery that originates from improper input neutralization during page generation...
SolarWinds Platform 2023.2.0 < 2023.3 Multiple Vulnerabilities
The version of SolarWinds Platform installed on the remote host is prior to 2023.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20233 advisory. - Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to...
CVE-2023-33229
The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...
Input validation
The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...
CVE-2023-33229 SolarWinds Platform Incorrect Input Neutralization Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...
CVE-2023-33229 SolarWinds Platform Incorrect Input Neutralization Vulnerability
The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...
PT-2023-24234 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML, due to incorrect input neutralization...
CVE-2023-38435
An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...
Cross site scripting
An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...
CVE-2023-36502
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...
CVE-2023-36502
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...
CVE-2023-2960
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS.This issue affects Oliva Expertise EKS: before 1.2...
CVE-2023-2960
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS. This issue affects Oliva Expertise EKS: before 1.2...
CVE-2023-2960
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS. This issue affects Oliva Expertise EKS: before 1.2...
PT-2023-22330
Name of the Vulnerable Software and Affected Versions Oliva Expertise EKS versions prior to 1.2 Description The issue affects Oliva Expertise EKS, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations For versions prior to 1.2, updat...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iDisplay PlatPlay DS allows Stored XSS.This issue affects PlatPlay DS: before 3.14...
CVE-2023-3319
CVE-2023-3319 is a stored XSS in iDisplay PlatPlay DS caused by improper neutralization of input during web page generation. Affected: PlatPlay DS versions before 3.14. Content from the connected documents confirms the vulnerability type (Stored XSS) and affected version, but does not provide exp...
The vulnerability in the web interface for operating systems ArubaOS allows a hacker to increase their privileges and execute arbitrary commands.
The vulnerability of the ArubaOS operating system’s web management interface is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary...