CVE-2023-4832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072...

CVE-2023-29183

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow an authenticated...

Cross site scripting

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow an authenticated...

Protect

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiOS and FortiProxy GUI may allow an authenticated attacker to trigger malicious JavaScript code execution via crafted guest management setting...

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection. This issue affects E-commerce Software: before 20230901...

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Osoft Paint Production Management allows SQL Injection.This issue affects Paint Production Management: before 2.1...

Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

Impact Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix ts SSO.init'javascript:alert"javascript successfully injected"' Patches This vulnerability was patched on version 0.1.0 Workarounds This vulnerability can be prevented if...

The vulnerability of the Zoom video conferencing service, which exists due to the lack of measures to neutralize special elements, allows a violator to increase their privileges.

The vulnerability of the Zoom video conferencing service exists due to the lack of measures taken to neutralize certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

CVE-2023-37221

7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2023-37221

CVE-2023-37221 affects 7Twenty BOT and describes a Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The issue is documented across multiple sources (NVD, EUVD/ENISA, CVE lists, etc.), with the root cause stated as failure to properly ...

7Twenty BOT Cross-Site Scripting Vulnerability

7Twenty BOT is an artificial intelligence-based digital system from 7Twenty. 7Twenty BOT suffers from a cross-site scripting vulnerability that stems from incorrect neutralization of input during web page generation...

CVE-2023-39980

A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter SQL commands...

CVE-2023-41049 Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix. This vulnerability has been patched on version 0.1.0. Users are...

Sql injection

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See...

CVE-2023-39971

CVE-2023-39971 is an XSS vulnerability in the AcyMailing Enterprise component for Joomla, caused by improper neutralization of input during web page generation. Affected versions are 6.7.0 through 8.6.3. Connected sources consistently describe the issue as cross-site scripting due to input handli...

CVE-2023-39971 Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...