Lucene search
+L

3240 matches found

CNNVD
CNNVD
added 2021/06/24 12:0 a.m.7 views

WebPort 跨站脚本漏洞

WebPort is a remote access and preventive maintenance device. It enables access to control system data and devices. A security vulnerability exists in WebPort =1.19.1 that stems from an xss vulnerability via the connection-name parameter in type-conn...

5.4CVSS5.8AI score0.00728EPSS
Exploits1References2
VulnCheck KEV
VulnCheck KEV
added 2021/06/01 12:0 a.m.5 views

VulnCheck KEV: CVE-2021-21315

In this vulnerability, an attacker can send a malicious payload that will exploit the name parameter. After successful exploitation, attackers can execute remote...

7.8CVSS7.2AI score0.9024EPSS
Exploits4References1
wpexploit
wpexploit
added 2021/05/31 12:0 a.m.155 views

WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)

The WP Config File Editor WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS vulnerability. By default, only administrator users could access the affected functionality, limiting the exploitability of the vulnerability. However, some WordPress admins may allow lesse...

5.4CVSS0.5AI score0.0062EPSS
Exploits2
OSV
OSV
added 2021/05/26 5:15 p.m.10 views

CVE-2021-33469

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

4.8CVSS5.8AI score0.00662EPSS
Exploits1References2
NVD
NVD
added 2021/05/26 5:15 p.m.24 views

CVE-2021-33469

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

4.8CVSS0.00662EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2021/05/26 5:15 p.m.2 views

CVE-2021-33469

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

4.8CVSS6.1AI score0.00662EPSS
Exploits1References3
Prion
Prion
added 2021/05/26 5:15 p.m.15 views

Cross site scripting

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

3.5CVSS4.9AI score0.00662EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/05/26 4:36 p.m.27 views

CVE-2021-33469

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

5.2AI score0.00662EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/05/26 12:0 a.m.5 views

COVID19 Testing Management System 跨站脚本漏洞

COVID19 Testing Management System is a COVID19 Testing Management System. A cross-site scripting vulnerability exists in COVID19 Testing Management System version 1.0, which can be exploited via the Admin name parameter...

4.8CVSS4.9AI score0.00662EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2021/05/26 12:0 a.m.6 views

PT-2021-20141 · Unknown · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: COVID19 Testing Management System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the Admin name parameter. Recommendations: For COVID19 Testing Management System version 1.0,...

4.8CVSS5.1AI score0.00662EPSS
Exploits1References4
OSV
OSV
added 2021/05/12 5:15 p.m.7 views

CVE-2021-30214

Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...

5.4CVSS6.1AI score0.23795EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2021/05/12 5:15 p.m.3 views

CVE-2021-30214

Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...

5.4CVSS6.2AI score0.23795EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/05/12 4:18 p.m.23 views

CVE-2021-30214

Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...

5.9AI score0.23795EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/05/12 12:0 a.m.4 views

Knowage 跨站脚本漏洞

Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A cross-site scripting vulnerability exists in Knowage Suite version 7.3. An attacker can inject arbitrary web scripts via the "name" parameter...

5.4CVSS5.4AI score0.00499EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/12 12:0 a.m.7 views

Knowage 注入漏洞

Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A security vulnerability exists in Knowage Suite version 7.3. The vulnerability stems from the program's tendency to store client templates in...

5.4CVSS5.6AI score0.23795EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/05/10 10:13 p.m.24 views

CVE-2020-23373

Cross-site scripting XSS vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter...

5.2AI score0.00791EPSS
Exploits1References1
PyPA
PyPA
added 2021/05/07 5:15 a.m.9 views

PYSEC-2021-101

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

10CVSS7.3AI score0.02113EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.6 views

Knowage 注入漏洞

Knowage is a suite of open source tools for modern business analytics. An HTML injection vulnerability exists in Knowage versions prior to 7.4. The vulnerability can be exploited to inject arbitrary HTML into "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters...

4.8CVSS5.8AI score0.0066EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2021/03/18 12:15 p.m.3 views

CVE-2021-28417

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...

4.8CVSS4.9AI score0.01871EPSS
Exploits4References3
CNNVD
CNNVD
added 2021/03/18 12:0 a.m.6 views

SEO Panel 跨站脚本漏洞

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the archive.php searchname parameter...

4.8CVSS5.3AI score0.01871EPSS
Exploits4References5
Rows per page
Query Builder