Lucene search
+L

2664 matches found

NVD
NVD
•added 2022/07/12 9:15 p.m.•33 views

CVE-2022-31654

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations...

5.4CVSS0.00433EPSS
SaveExploits0References1
NVD
NVD
•added 2022/07/12 9:15 p.m.•42 views

CVE-2022-31655

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts...

5.4CVSS0.00433EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/07/12 9:15 p.m.•27 views

CVE-2022-31654

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations...

5.4CVSS5.7AI score0.00433EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/12 9:15 p.m.•12 views

CVE-2022-31654

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations...

5.4CVSS5AI score0.00433EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/12 9:15 p.m.•37 views

Cross site scripting

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations...

3.5CVSS5.1AI score0.00433EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/07/12 9:15 p.m.•33 views

Cross site scripting

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts...

3.5CVSS5.1AI score0.00433EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/07/12 8:44 p.m.•52 views

CVE-2022-31655

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts...

5.4AI score0.00433EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/12 8:44 p.m.•101 views

CVE-2022-31655

CVE-2022-31655 affects VMware vRealize Log Insight before 8.8.2. The issue is a stored cross-site scripting vulnerability caused by improper input sanitization in alerts, as documented by Red Hat, NVD, and VMware advisories. The vulnerability arises in the alert configuration/input path and can b...

5.4CVSS5.1AI score0.00433EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/07/12 8:43 p.m.•45 views

CVE-2022-31654

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations...

5.4AI score0.00433EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/12 8:43 p.m.•121 views

CVE-2022-31654

CVE-2022-31654 affects VMware vRealize Log Insight prior to 8.8.2. The issue is a stored cross-site scripting (XSS) vulnerability caused by improper input sanitization in configurations, enabling malicious input to be stored and potentially executed in the context of an admin-facing interface. Th...

5.4CVSS5.1AI score0.00433EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/07/12 12:00 a.m.•8 views

PT-2022-4080

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions prior to 8.8.2 Description The issue is related to a stored cross-site scripting vulnerability due to improper input sanitization in configurations. This could allow a remote attacker to perform a cross-sit...

6.4CVSS0.00433EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/12 12:00 a.m.•8 views

CVE-2022-31655: Improper Neutralization of Input During Web Page Generation

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts...

5.4CVSS5.8AI score0.00433EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/12 12:00 a.m.•11 views

CVE-2022-31654: Improper Neutralization of Input During Web Page Generation

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations...

5.4CVSS5.8AI score0.00433EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/12 12:00 a.m.•5 views

PT-2022-4137

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions prior to 8.8.2 Description The issue is related to a stored cross-site scripting vulnerability due to improper input sanitization in alerts, which can allow a remote attacker to conduct cross-site scripting...

5.5CVSS0.00433EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/07/12 12:00 a.m.•30 views

VMware vRealize Log Insight Cross-Site Script Vulnerability

VMware vRealize Log Insight is a centralized log management solution from VMware. The product supports features such as log organization and log analysis. A cross-site scripting vulnerability exists in VMware vRealize Log Insight versions prior to 8.8.2, which stems from improper input escaping i...

5.4CVSS5.4AI score0.00433EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/07/12 12:00 a.m.•22 views

VMware vRealize Log Insight Cross-Site Script Vulnerability

VMware vRealize Log Insight is a centralized log management solution from VMware. The product supports features such as log organization and log analysis. A cross-site scripting vulnerability exists in VMware vRealize Log Insight versions prior to 8.8.2, which stems from improper input escaping i...

5.4CVSS5.4AI score0.00433EPSS
SaveExploits0References4
VMware
VMware
•added 2022/07/10 12:00 a.m.•70 views

VMSA-2022-0019:VMware vRealize Log Insight contains multiple stored cross-site scripting vulnerabilities

Advisory ID: VMSA-2022-0019 CVSSv3 Range: 3.9 Issue Date:2022-07-12 Updated On: 2022-07-12 Initial Advisory CVEs: CVE-2022-31654, CVE-2022-31655 Synopsis: VMware vRealize Log Insight contains multiple stored cross-site scripting vulnerabilities RSS Feed Download PDF Download Text File Share this...

5.4CVSS5.8AI score0.00433EPSS
SaveExploits0References14Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/06/21 4:13 p.m.•27 views

Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM InfoSphere Identity Insight (CVE-2021-35550, CVE-2021-35603, CVE-2022-21496)

Summary There are multiple vulnerabilities in the IBM Java used in IBM InfoSphere Identity Insight II. These vulnerabilities are addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

7.1CVSS1.4AI score0.07376EPSS
SaveExploits0Affected Software1
osv_mal
osv_mal
•added 2022/06/20 8:17 p.m.•14 views

MAL-2022-3848 Malicious code in insight-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba314194b15912d401f23ce9b762acf1484ab7a4617af34be695242515b1e711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NCSC
NCSC
•added 2022/05/27 12:00 a.m.•23 views

Vulnerabilities fixed in Ctrix ADC and Gateway

Two vulnerabilities have been fixed in Citrix ADC and Citrix Gateway. The vulnerabilities allow a remote malicious party able to effect a denial-of-service DoS. For CVE-2022-27508 does not require authentication, while CVE-2022-27507 does. The CVE-2022-27507 vulnerability is only exploitable when...

7.5CVSS7AI score0.01015EPSS
SaveExploits0
Rows per page
Query Builder