CVE-2023-52367

Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity...

CVE-2023-52367

Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity...

CVE-2023-32722 Stack-buffer Overflow in library module zbxjson

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen...

CVE-2022-48498

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

GHSA-R9XX-4CMV-856X Cross-site Scripting in Zenario

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

CVE-2022-44069

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

Cross site scripting

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

CVE-2022-44069

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

CVE-2022-44069

CVE-2022-44069 affects Zenario CMS 9.3.57186, with XSS via the Nest library module. The root cause is likely improper handling of input within the Nest module, enabling cross-site scripting. Impact: Low in confidentiality and integrity, with user interaction required; no Availability impact docum...

CVE-2022-44069

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

PT-2022-27096 · Nest +1 · Nest +1

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.3.57186 Description: The issue is related to Cross Site Scripting XSS via the Nest library module. Recommendations: For Zenario CMS version 9.3.57186, consider disabling the Nest library module as a temporary workaround...

CVE-2022-42113

CVE-2022-42113 is a documented XSS vulnerability in the Document Library module affecting Liferay Portal 7.4.3.30–7.4.3.36 and Liferay DXP 7.4 update 30–36. The issue allows remote attackers to inject arbitrary web script or HTML via the redirect parameter. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:...

CVE-2022-42113

A Cross-site scripting XSS vulnerability in Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update 36 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...

CVE-2022-39113

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed...

CVE-2022-31301

Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

CVE-2021-25783

Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search...

CVE-2021-33337

Cross-site scripting XSS vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the...

Cross site scripting

Cross-site scripting XSS vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2020-8542

OX App Suite through 7.10.3 allows XSS...