Lucene search
+L

8749 matches found

CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•21 views

Apple iOS Input Validation Error Vulnerability

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system. A security vulnerability exists in a number of Apple products, which arises from the handling of...

8.8CVSS7.5AI score0.02738EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•18 views

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser using a specially crafted...

9CVSS8.1AI score0.02566EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2021/02/01 4:15 p.m.•33 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

6.1CVSS6.2AI score
SaveExploits0References1
NVD
NVD
•added 2021/02/01 4:15 p.m.•38 views

CVE-2020-13562

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

9.6CVSS6.5AI score0.77745EPSS
SaveExploits1References1
NVD
NVD
•added 2021/02/01 4:15 p.m.•43 views

CVE-2020-13563

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

9.6CVSS6.5AI score0.75856EPSS
SaveExploits1References1
NVD
NVD
•added 2021/02/01 4:15 p.m.•37 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

9.6CVSS6.5AI score0.75856EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/02/01 4:15 p.m.•36 views

CVE-2020-13562

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

6.1CVSS6.2AI score
SaveExploits0References1
Prion
Prion
•added 2021/02/01 4:15 p.m.•41 views

Cross site scripting

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

4.3CVSS6AI score0.77745EPSS
SaveExploits1References1Affected Software2
Prion
Prion
•added 2021/02/01 4:15 p.m.•33 views

Cross site scripting

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

4.3CVSS6AI score0.75856EPSS
SaveExploits1References1Affected Software2
Cvelist
Cvelist
•added 2021/02/01 3:07 p.m.•53 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

9.6CVSS6AI score0.75856EPSS
SaveExploits1References1
Mend
Mend
•added 2021/02/01 3:07 p.m.•8 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

9.6CVSS0.75856EPSS
SaveExploits1References1
Mend
Mend
•added 2021/02/01 3:06 p.m.•6 views

CVE-2020-13563

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

9.6CVSS0.75856EPSS
SaveExploits1References1
CVE
CVE
•added 2021/02/01 3:05 p.m.•98 views

CVE-2020-13562

CVE-2020-13562 – phpGACL 3.3.7 XSS vulnerabilities. Multiple cross‑site scripting flaws exist in the template rendering paths of phpGACL 3.3.7, enabling arbitrary JavaScript execution via unescaped user input in template actions (e.g., action, group_id, acl_id). Documented vectors include admin/a...

9.6CVSS6AI score0.77745EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/02/01 3:05 p.m.•7 views

CVE-2020-13562

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

9.6CVSS0.77745EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/02/01 3:05 p.m.•51 views

CVE-2020-13562

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

9.6CVSS6AI score0.77745EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/02/01 12:00 a.m.•54 views

Hitachi Vantara Pentaho DOM-Type Cross-Site Scripting Vulnerability

Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A DOM-type cross-site scripting vulnerability exists in Hitachi Vantara Pentaho in the Analysis Report...

5.4CVSS6.3AI score0.0062EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/01 12:00 a.m.•8 views

CVE-2020-13564: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

9.6CVSS5.9AI score0.75856EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/01 12:00 a.m.•10 views

CVE-2020-13563: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

9.6CVSS5.9AI score0.75856EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/01 12:00 a.m.•10 views

CVE-2020-13562: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

9.6CVSS5.9AI score0.77745EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/02/01 12:00 a.m.•23 views

Hitachi Vantara Pentaho Cross-Site Scripting Vulnerability

Pentaho is a Business Intelligence BI software that provides data integration, OLAP services, reporting, information dashboards, data mining, and Extract, Transform, Load ETL capabilities. A reflected cross-site scripting vulnerability exists in the 'type' attribute of the 'dashboardXml' paramete...

5.4CVSS6.3AI score0.0062EPSS
SaveExploits0References1
Rows per page
Query Builder