13334 matches found
CVE-2024-8608
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0...
CVE-2024-8608 Stored XSS in Oceanic Software's ValeApp
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0...
CVE-2024-38308: Improper Neutralization of Input During Web Page Generation
Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output...
CVE-2024-9283: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public an...
CVE-2024-7679
In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-7575
In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
CVE-2024-47303
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addons for Elementor: from n/a through 8.5...
WordPress plugin Livemesh Addons for Elementor: Cross-site scripting vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Talent BAP Automation Cross-Site Script Vulnerability
Talent BAP Automation is an application from Talent, Inc. A cross-site scripting vulnerability exists in Talent BAP Automation versions prior to 30840, which stems from improper input neutralization during web page generation, making it susceptible to stored cross-site scripting attacks...
WordPress Plugin: Testimonials – Cross-Site Script Vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
Telerik UI command injection vulnerability
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A command injection vulnerability exists in Telerik UI 2024 Q3 2024.3.806 and earlier versions, which stems from a command injection attack that can be performed via improper neutralization of...
CVE-2024-47083: Improper Output Neutralization for Logs
Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the clientsecret used in the service principal authentication, may be...
Alisonic Sibylla
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Alisonic Equipment: Sibylla Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...
CVE-2024-7835
CVE-2024-7835 describes a Reflected XSS in Exnet Informatics Software Ferry Reservation System. The issue stems from improper neutralization of input during web page generation, allowing attacker-controlled input to be reflected in the page. Affected versions are the Ferry Reservation System prio...
CVE-2024-7835 Reflected XSS in Exnet Informatics Software's Ferry Reservation System
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...
Exnet Informatics Software Ferry Reservation System Cross-site Scripting Vulnerability
Exnet Informatics Software Ferry Reservation System is a ferry reservation system from Exnet Informatics Software. A cross-site scripting vulnerability exists in versions prior to Exnet Informatics Software Ferry Reservation System 240805-002, which stems from improper input neutralization during...
CVE-2024-45808: Improper Output Neutralization for Logs
Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that allows malicious attackers to inject unexpected content into access logs. This is achieved by exploiting the lack of validation for the REQUESTEDSERVERNAME field for access logger...
Ece Electronic Ticket System Cross-site Scripting Vulnerability
Ece Electronic Ticket System is an electronic ticket system from Ece Corporation. A cross-site scripting vulnerability exists in the Ece Electronic Ticket System that stems from improper input neutralization during web page generation...
PT-2024-38579
Name of the Vulnerable Software and Affected Versions Ece Software Electronic Ticket System versions prior to 2024.08 Description The issue affects the Electronic Ticket System, allowing for Reflected XSS, or Cross-Site Scripting XSS, due to improper neutralization of input during web page...