Jeedom <=4.0.38 - Cross-Site Scripting

Jeedom through 4.0.38 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-9036 info: name: Jeedom =4.0.38 - Cross-Site Scripting author: pikpikcu severity: medium...

EUVD-2021-29525

Malicious code in bioql PyPI...

CVE-2021-42557

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials...

CVE-2020-9036

Jeedom through 4.0.38 allows XSS...

CVE-2021-42557

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials...

CVE-2021-42557

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials...

Authentication flaw

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials...

CVE-2021-42557

In Jeedom through 4.1.19, a vulnerability allows a remote attacker to bypass API access and retrieve user credentials. Affected product: Jeedom core (versions up to 4.1.19). The available sources confirm that the issue enables credential disclosure via API access bypass, but the provided document...

CVE-2021-42557

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials...

Jeedom 安全漏洞

Jeedom is an open source home automation solution for the Internet of Things. Jeedom suffers from a security vulnerability that allows a remote attacker to bypass API access and retrieve user credentials...

market.jeedom.com Cross Site Scripting vulnerability OBB-1293403

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Jeedom Cross-Site Scripting Vulnerability

Jeedom is an open source home automation solution for the Internet of Things. A cross-site scripting vulnerability exists in Jeedom 4.0.38 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the...

CVE-2020-9036

Jeedom through 4.0.38 allows XSS...

CVE-2020-9036

Jeedom through 4.0.38 allows XSS...

Cross site scripting

Jeedom through 4.0.38 allows XSS...

CVE-2020-9036

Jeedom

CVE-2020-9036

Jeedom through 4.0.38 allows XSS...