Lucene search
K

2179 matches found

CNNVD
CNNVD
added 2022/12/14 12:0 a.m.3 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS6.2AI score0.00708EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/14 12:0 a.m.11 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.0048EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/14 12:0 a.m.7 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.0048EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/14 12:0 a.m.3 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS6.1AI score0.0048EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/14 12:0 a.m.7 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS6.2AI score0.0048EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/14 12:0 a.m.3 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.0048EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/14 12:0 a.m.2 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.0048EPSS
Exploits0References3
Veracode
Veracode
added 2022/12/13 5:3 a.m.17 views

Cross-Site Scripting (XSS)

claviska/jquery-minicolors is vulnerable to cross-site scripting. The vulnerability exists because of the lack of sanitization in the name attribute in jquery.minicolors.min.js, allowing an attacker to inject and execute malicious JavaScript...

2.9AI score
Exploits0References7Affected Software2
Cvelist
Cvelist
added 2022/12/13 12:0 a.m.19 views

CVE-2022-44575

A vulnerability has been identified in PLM Help Server V4.2 All versions. A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious javascript code by tricking users into accessing a malicious link...

6.1AI score0.00359EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/12/13 12:0 a.m.2 views

Siemens PLM Help Server 跨站脚本漏洞

PLM Help Server is a document server used to host help or manual files. A cross-site scripting vulnerability exists in Siemens PLM Help Server V4.2, which can be exploited by an attacker to execute malicious javascript code by tricking a user into visiting a malicious link...

6.1CVSS6.4AI score0.00359EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.3 views

PT-2022-5956 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...

7.5CVSS5.1AI score0.0048EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.3 views

PT-2022-5997 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page,...

5.4CVSS5.2AI score0.0048EPSS
Exploits0References6
Veracode
Veracode
added 2022/12/02 4:3 a.m.27 views

Cross-site Scripting (XSS)

thinkcmf/thinkcmf is vulnerable to cross-site scripting.The vulnerability exists in multiple functions due to insufficient sanitization of the slideshow management section which allows an attacker to inject and execute malicious JavaScript into the system...

5.4CVSS5.7AI score0.00394EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2022/12/01 11:34 a.m.13 views

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in user group management feature which allows an attacker to inject and execute malicious javaScript on victim's browser...

4.8CVSS5.3AI score0.00586EPSS
Exploits0References6Affected Software1
Veracode
Veracode
added 2022/12/01 11:19 a.m.21 views

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in the permission settings feature which allows an attacker to inject and execute malicious JavaScript on the victim's browser...

4.8CVSS5.3AI score0.00586EPSS
Exploits0References6Affected Software1
Veracode
Veracode
added 2022/11/28 8:0 a.m.19 views

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists when the management system is used by an unspecified number of users which allows an attacker to inject and execute malicious JavaScript...

6.1CVSS6AI score0.00547EPSS
Exploits0References5Affected Software1
Veracode
Veracode
added 2022/11/28 7:21 a.m.18 views

Cross-site Scripting (XSS)

spatie/browsershot is vulnerable to cross-site scripting. The vulnerability exists due to the lack of file:// validation in the html content of Browsershot.php which allows a remote attacker to inject and execute malicious JavaScript into the system...

8.2CVSS7.6AI score0.00635EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2022/11/25 12:0 a.m.6 views

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS 4.7.1 and earlier versions, which can be exploited by an attacker to execute malicious JavaScript code that may alter the display of a page or disclose...

6.1CVSS5.7AI score0.00547EPSS
Exploits0References5
Veracode
Veracode
added 2022/11/24 6:47 a.m.36 views

Cross-site Scripting (XSS)

moodle/moodle is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation in the user-supplied input for field.class.php and helper.php which allows a remote attacker to inject and execute malicious JavaScript into the system...

5.4CVSS7AI score0.00655EPSS
Exploits0References12Affected Software1
Veracode
Veracode
added 2022/11/24 6:36 a.m.14 views

Cross-site Scripting (XSS)

silverstripe/versioned-admin is vulnerable to cross-site scripting.The vulnerability exists in the Value function of DiffField.php due to non-html fields in diff which allows an attacker to inject and execute malicious JavaScript via compare mode...

5.4CVSS5.5AI score0.00595EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder